More results...

Peer practices: DPIA under the GDPR

While the General Data Protection Regulation (GDPR) has now been in force for several years throughout the European Union (EU), many organisations still hesitate to conduct a data protection impact assessment (DPIA). However, the GDPR obligates data controllers to carry out a DPIA if data processing ‘is likely to result in a high risk to the rights and freedoms of natural persons.’ Van Bael & Bellis is sharing several documents created by its data protection team, to help other Beltug members navigate the process.

18 / 03 / 25

Beltug’s strength lies in the sharing of knowledge between peers who are going through the same journeys.

According to Van Bael and Bellis, “A data protection impact assessment (DPIA) is a techno-legal process that helps organisations make better decisions on how to protect personal data and comply with the law.” It involves identifying and analysing the various potential effects of a project’s data processing approach, and recommends ways to avoid any negative consequences that are found.

Van Bael and Bellis is sharing three documents with Beltug members:

  • Data protection impact assessment in the European Union – developing a template for a report: a general DPIA template that complies with the GDPR and reflects best practices for impact assessment
  • Data protection impact assessment: More than just a compliance tool: a brochure introducing the concept of DPIA, outlining its pros and cons, addressing the common questions, etc.
  • Technology & Regulation: an academic article on the concept of risk in EU data protection law

They are available to Beltug members after login.

You may also like:

Biometrics & privacy: Beltug Biometric Data Assessment tool

Is biometrics a suitable fit for your organisation? Biometric data is increasingly being used by both private and public organisations. In the discussions around introducing it, the topic of privacy must be addressed. Beltug’s Biometric Data...

Peer Practices: Information Security Policy

In today’s digital age, organisations face an ever-evolving threat landscape, requiring robust cyber security policies to protect critical operations and ensure compliance with legal frameworks. For companies providing essential services, the stakes are even higher as...

Peer Practices: Non-Functional Requirements and Cyber Security Policies

Well-drafted ICT policies are essential for any organisation to operate effectively and securely. They provide clear guidance, ensuring everyone understands their roles and responsibilities while promoting consistency across processes. By addressing key areas like security, compliance...

Peer practices: Checklist & security clauses for 3rd-party contracts

For all Beltug members, working with external partners is crucial to achieve their goals. But to ensure good cooperation, you need good contracts. A Beltug member is sharing (anonymously) a checklist with areas to cover for...

Return to library