Glossary · Compliance + audit
Data Protection Impact Assessment (DPIA)
GDPR Article 35 requirement triggered by data processing 'likely to result in a high risk to the rights and freedoms of natural persons.' AI systems processing personal data at scale typically trigger this. The DPIA must precede the processing and document the necessity, proportionality, and mitigation measures.
Framework references
- GDPR Art. 35
- EU AI Act Art. 27 (FRIA cross-reference)