To facilitate compliance with the EU General Data Protection Regulation, the Spanish Data Protection Agency has published data protection impact assessment guidelines and risk assessment guidelines (in Spanish). In this post for The Privacy Advisor, Luis Alberto Montezuma, CIPP/C, CIPP/E, CIPP/US, CIPM, FIP, offers an overview of the guidelines, which "provide information and examples about the concepts, measures and techniques that could be applied to identify, evaluate and manage the risks and high risks involved in the processing of personal data. The guidelines also help organizations know how to reduce such risks to an acceptable or tolerable level, meet individuals' expectations of privacy, and comply with the GDPR."
Full Story