The Belgian data protection authority released its updated list of processing activities that require a data protection impact assessment under Article 35(4) of the EU General Data Protection Regulation, according to a post from Hunton Andrews Kurth's Privacy & Information Security Law Blog. The DPA revamped its list after the European Data Protection Board offered its opinions on the lists submitted by DPAs on which activities should require a DPIA. The Belgian DPA identified the automated collection of health data through an implantable medical device and the processing of biometric data to identify individuals in public as two actions that need a DPIA.
Full Story