Comment to Articles 35 and 36

This chapter focuses on Articles 35 and 36: the nature and domain of data protection impact assessment (DPIA) and the DPIA procedure are examined to provide operational guidelines to data controllers and data processors. The last part of this chapter concerns the relevance of these provisions and their application in practice. In this regard, the author points out how – considering the increasing use of large-scale data analysis in decision-making processes – the existing DPIA model should evolve into a broader assessment encompassing social and ethical values.

Перевод пока недоступен