The European Data Protection Board released its opinion on the draft list submitted by the Slovakian data protection authority on what is subject to a data protection impact assessment under the EU General Data Protection Regulation. The EDPB offered opinions on the DPA's view toward biometric information, location data, information gathered via third parties, and data processed for scientific and historical purposes without consent. The EDPB found the DPA's draft list may lead to "an inconsistent application of the requirement for a DPIA" and offered recommendations for the agency to follow.
Full Story