Regulation no. 1/2018: List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”) was published on 16th October 2018.
The CNPD (Portuguese Data Protection Commission) has approved a list of personal data processing activities, especially the ones using new technologies, that are considered to be likely to result in a high risk to the rights and freedoms of natural persons and therefore must be subject to a Data Protection Impact Assessment (“DPIA”).
To know more about this Regulation, read our informative note here.