ABSTRACT

Article 35(1) of the new General Data Protection Regulation (GDPR) states that

The controller shall seek the advice of the data protection ofcer, where designated, when carrying out a data protection impact assessment.