1In such cases, a data protection impact assessment should be carried out by the controller prior to the processing in order to assess the particular likelihood and severity of the high risk, taking into account the nature, scope, context and purposes of the processing and the sources of the risk. 2That impact assessment should include, in particular, the measures, safeguards and mechanisms envisaged for mitigating that risk, ensuring the protection of personal data and demonstrating compliance with this Regulation.
* This title is an unofficial description.
Why Recital 90 Matters for GDPR Compliance?
Recital 90 is crucial for GDPR compliance because it outlines the purpose and importance of conducting a Data Protection Impact Assessment (DPIA) when processing activities are likely to result in a high risk to individuals’ rights and freedoms. It explains that organizations must evaluate the nature, scope, context, and purposes of processing, as well as identify potential risks and implement measures to mitigate them. This ensures a proactive approach to data protection by addressing risks before processing begins. The recital also emphasizes that DPIAs should include safeguards, security measures, and mechanisms to demonstrate compliance with GDPR. Overall, Recital 90 strengthens accountability and ensures that high-risk processing is carefully assessed and managed.