Government and public statistics
Art. 35 GDPR: Data protection impact assessment
gdpr-info.eu (text of Regulation (EU) 2016/679), 2016
Read the originalRead on October 17, 2026
- What it is
- The text of Article 35 of the EU General Data Protection Regulation, which requires an impact assessment before processing that is likely to result in a high risk, and lists the cases where one is required, including large-scale processing of special categories of data.
- How much weight it carries
- The regulation's text, reproduced on a reference site. The Official Journal of the EU is the authoritative version, and the English text here should be checked against it for legal purposes.
Facts taken from this source
- Article 35(3)(b) of the GDPR lists processing on a large scale of special categories of data, which include biometric data used to identify a person, as a case that requires a data protection impact assessment.
“processing on a large scale of special categories of data referred to in Article 9 (1)” (Article 35(3)(b))