dpia-sentinel-oliver-schmidt-prietz

A GDPR DPIA is required when processing meets the EDPB nine criteria or triggers under Article 35(3), such as large-scale profiling or systematic monitoring of publicly accessible areas.

You assess multi-jurisdictional DPIA requirements by checking local blacklist and whitelist rules against the EDPB criteria, then consolidating the findings into a unified DPIA scope with per-jurisdiction conclusions.

Generate a DPIA risk register and residual risk heat map by applying 5x5 risk scoring to identified threats, mapping mitigations, and producing visual heat maps for executive review.

Yes, the DPIA framework supports AI-specific risk assessments by aligning with the dual-phase approach outlined in the EDPB Opinion 28/2024 for high-risk AI processing activities.

An Article 36 prior consultation package requires a threshold justification memo, executive summary, full DPIA document, and a residual risk report to submit to the supervisory authority.

Yes, you can use the threshold analysis to document why a full DPIA is not required for cross-border processing, generating a threshold justification memo instead of a full DPIA report.