Amendment LIBE #2020

Article 33 – Paragraph 1

1. Where processing operations present specific risks to the rights and freedoms of data subjects by virtue of their nature, their scope or their purposes, the controller or the processor acting on the controller's behalf shall carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. An impact assessment is not necessary where: (a) the processing is a legal obligation; or (b) a consent of the data subject is given; or (c) Article 6(1)(b) or Article 38a applies.

Current Data Privacy Rating is : weaker    Axel Voss Germany EPP

comments powered by Disqus