The opinion of the firm:
Section 1 of article 35 of the RGPD establishes, in general, the obligation of those responsible for data processing to carry out an EIPD prior to the start-up of such processing when it is probable that, due to their nature, scope, context or purposes entail a high risk for the rights and freedoms of natural persons, high risk. With the publication of this list, compliance with said obligation is facilitated, in terms of the identification of those specific treatments that require EIPD, which is one of the most important and at the same time most complex procedures in terms of data protection. Although it is the obligation of the person responsible for the treatment to carry out this identification, as well as the preparation of the EIPD itself when it is mandatory due to the nature of the treatment, at Albos Law we recommend consulting expert lawyers in the field of data protection so that they supervise such procedures.