
When is a Data Protection Impact Assessment (DPIA) required?
National Data Protection Authorities, in concertation with the European Data Protection Board, may provide lists of cases where a DPIA would be required. The DPIA should be conducted …
AN OVERVIEW OF THE EU DATA GOVERNANCE ACT The Data Governance Act (DGA), which creates a framework for increased data availability and re-use within the European Union. …
EU Digital Omnibus: The European Commission Proposes …
The European Data Protection Board (EDPB) will be required to develop an EU-wide list of processing activities that do or do not require a Data Protection Impact Assessment (DPIA), to …
Brussels’ Digital Omnibus: How the EU Plans to Rewire GDPR and the AI Act
6 days ago · Today, data protection impact assessment (DPIA) obligations are governed partly by EU rules and partly by national DPA lists. The Omnibus tries to simplify that landscape by:
EU Digital Omnibus: What changes lie ahead for the Data Act, …
Dec 5, 2025 · On 19 November 2025, the European Commission published the long-awaited Digital Omnibus, an initiative to streamline and update key pillars of the EU's digital legal …
The EU Data Act (EU) 2023/2854 sits alongside the Open Data Directive (EU) 2019/1024, the Data Governance Act (DGA) (EU) 2022/868 and sectoral reuse rules. Together they aim to …
PIA is optional. EDPB guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/6. 9, …
Understanding PIA and DPIA: A Legal Overview for Global Data Governance ...
May 20, 2025 · DPIA (Data Protection Impact Assessment) is a legally required process under laws such as the EU’s GDPR when certain types of high-risk data processing activities are …
EU Data Governance Act: 101 - International Association of …
This chart provides an overview of the EU Data Governance Act. The DGA seeks to foster public sector information reuse; to create a supervisory framework for the provision of data sharing …
Note: supervisory authorities are required to establish, make public and communicate a list of the processing operations that require a DPIA to the European Data Protection Board (EDPB) …