On December 20, 2016, the Privacy Commission published for consultation (source document in French and in Dutch) a draft recommendation on the obligation to conduct impact assessments introduced by the GDPR. The review addresses the content of the assessment, the compulsory nature of impact assessments, and stakeholders involved the process.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.