EU Member State DPIA Whitelists, Blacklists and Guidance

Resource Center / Tools and Trackers / DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

This resource provides a list of EU member states with DPIA whitelists, blacklists and additional guidance resources.

Last updated: December 2019

Data protection authorities of many EU member states have published draft lists of data processing activities that would trigger the need for a data protection impact assessment in that country. This resource provides a list of EU member states with DPIA whitelists, blacklists and additional guidance resources.

As an additional resource, the IAPP published a two-part series on "What's subject to a DPIA under the GDPR?":

NOTE: This resource was last updated 16 December, 2019 and is no longer being updated.

Austria
- Whitelist from the Austrian Data Protection Authority
Belgium
- Blacklist & Whitelist from the Belgian Privacy Commission
Bulgaria
- Blacklist from The Commission for Personal Data Protection
Croatia
- Blacklist from the Personal Data Protection Agency of the Republic of Croatia
Cyprus
- Blacklist from the Office of the Commissioner for Personal Data Protection
Czech Republic
- Blacklist from The Office for Personal Data Protection
Denmark
- (Not available)
Estonia
- Blacklist from the Data Protection Inspectorate
Finland
- Blacklist from the Office of the Data Protection Ombudsman
France
- Blacklist from the CNIL
Germany
- Blacklists from German DPAs
- Baden-Wuerttemberg: Blacklists from German DPAs
- Brandenburg: Blacklist from The Data Protection Supervisor and the Right to File Inspection
- Federal Commissioner: Blacklist
- Hamburg: Blacklist
- Hessen: Blacklist from The State Commissioner for Data Protection Hessen
- Lower Saxony: Blacklist from The State Commissioner for Data Protection Niedersachsen
- North Rhine-Westphalia: Blacklist
- Rhineland-Palatinate: Private Bodies Blacklist, Public Bodies Blacklist
- Saarland: Blacklist
- Saxony: Blacklist from The State Commissioner for Data Protection Sachsen
- Schleswig-Holstein: Blacklist from The State Commissioner for Data Protection Schleswig-Holstein
- Thuringia: Blacklist from The State Commissioner for Data Protection Thüringer
Greece
- Blacklist from The Hellenic Data Protection Authority
Hungary
- Blacklist from the Hungarian Data Protection Authority
Ireland
- Blacklist from the Data Protection Commission
Italy
- Blacklist from the Italian Data Protection Authority
Latvia
- Blacklist from the Data State Inspecorate
Lithuania
- Blacklist from the State Data Protection Inspectorate
Luxembourg
- (Not available)
Malta
- Blacklist from The Office of the Information and Data Protection Commissioner
The Netherlands
- Final DPIA list from Dutch Data Protection Authority
Poland
- Blacklist from the Personal Data Protection Office
Portugal
- Blacklist from Portugal's National Commission for Data Protection
Romania
- Blacklist from the Romanian DPA: In Romanian, In English
Slovakia
- Blacklist from the Office for Personal Data Protection of the Slovak Republic
Slovenia
- Blacklist from the Information Commissioner of Slovenia
Spain
- (Not available)
Sweden
- Blacklist from the Datainspektionen
United Kingdom
- Blacklist from the Information Commissioner's Office

Tags: , , ,

Trump administration considers 'blacklisting' Chinese surveillance company

The New York Times reports the Trump administration is considering placing limits on Hikvision, one of the world’s largest surveillance firms, from buying American technology. This would place Hikvision on a U.S. blacklist. Hikvision products track people around the country using facial recognition ...

Government Gets Go-Ahead for Blacklist Database

The Swedish Data Inspection Board will allow the government to start a registry of blacklisted sports supporters, The Local reports. The board says there are a number of issues that need to be addressed before the registry moves forward, including exactly what information would be kept on blackliste...

Group Calls for Investigation into Blacklist Database

Click Liverpool reports on advocacy group Privacy International's call for a government investigation into a Bristol-based company's national blacklist of "nightmare" hotel guests. GuestScan.com allows hotel owners to share information about "known or potential troublemakers" in an online database d...

What triggers a DPIA under the GDPR?

This infographic helps determine activities are more likely to trigger a mandatory DPIA under the GDPR....

Template for Data Protection Impact Assessment (DPIA)

This template provides a list of questions related to data protection issues that should be considered by prior to conducting a DPIA....

ResourceCenter

All the tools and information you need in one easy-to-find place

EU Member State DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

EU Member State DPIA Whitelists, Blacklists and Guidance

Related Stories