Which of the following is TRUE about the Data Protection Impact Assessment (DPIA) process as required under the General Data Protection Regulation (GDPR)?

Which of the following is TRUE about the Data Protection Impact Assessment (DPIA) process as required under the General Data Protection Regulation (GDPR)?
A . The DPIA result must be reported to the corresponding supervisory authority.
B. The DPIA report must be published to demonstrate the transparency of the data processing.
C. The DPIA must include a description of the proposed processing operation and its purpose.
D. The DPIA is required if the processing activity entails risk to the rights and freedoms of an EU individual.

View Answer

Answer: D