Slovenia DPA creates guide for conducting data impact assessments

Slovenia's data protection authority, Informacijski Pooblaščenec, created an infographic to help data controllers conduct impact assessments. The infographic features the common shortcomings missing from impact assessments and offers recommendations to controllers. It also provides a checklist to help determine if an impact assessment is comprehensive enough. The country’s information commissioner said some mistakes are often repeated, such as missing risk assessment methodology.