{"id":433,"date":"2019-08-22T08:49:06","date_gmt":"2019-08-22T08:49:06","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=433"},"modified":"2020-05-25T09:06:45","modified_gmt":"2020-05-25T09:06:45","slug":"faq-impact-assessment","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-impact-assessment\/","title":{"rendered":"Faq &#8211; Impact assessment"},"content":{"rendered":"<p><a href=\"http:\/\/www.dataprotectionconsultant.it\/faq-impact-assessment\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-43\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-100x100.jpg 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-150x150.jpg 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><a href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/faq-impact-assessment\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-44\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-100x100.png 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-150x150.png 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"size-medium wp-image-49 aligncenter\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg\" alt=\"\" width=\"300\" height=\"136\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg 300w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-600x272.jpg 600w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq.jpg 617w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 18pt; color: #ff0000;\"><strong>Data protection impact assessment (impact assessment)<\/strong><\/span><\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Should a physician or a chemist carry out an impact assessment?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>In such cases the obligation does not apply, because even though data concerning health are processed, processing is not on a large scale: this means that it does not concern a high number of individuals.<\/strong><\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><span style=\"color: #0000ff;\"><strong><span style=\"font-family: 'Comic Sans MS', sans-serif;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/span><\/strong><\/span><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Can an impact assessment address multiple processing operations?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><strong><span style=\"color: #000000;\">An impact assessment can address a single data processing operation, but the GDPR states that a single impact assessment may address a set of similar processing operations which present similar high risks. Therefore, it is possible to analyse a set of processing operations which are similar in terms of nature, scope, context, purposes and risk. It is not necessary to carry out an impact assessment in cases, such as processing operations performed in a specific context and for a specific purpose, which have already been analysed. For instance, there is no need to carry out a new impact assessment where similar technology is used to collect the same sort of data for the same purposes.<\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><span style=\"color: #0000ff;\"><strong><span style=\"font-family: 'Comic Sans MS', sans-serif;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/span><\/strong><\/span><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Can an insurance policy be subscribed to cover the risk?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><strong><span style=\"color: #000000;\">In order to manage the risks to the rights and freedoms of persons, the risks have to be identified, analysed, estimated, evaluated, mitigated and reviewed regularly. Controllers cannot escape their responsibility by covering risks under insurance policies. Their responsibility remains unchanged.<\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/p>\n<hr \/>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><strong>To learn more, click <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/impact-assessment\/\">here<\/a><\/span><\/span> or <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/contacts\/\"><span style=\"text-decoration: underline; color: #0000ff;\">contact me<\/span><\/a>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Data protection impact assessment (impact assessment) Should a physician or a chemist carry out an impact assessment? In such cases the obligation does not apply, because even though data concerning health are processed, processing is not on a large scale: this means that it does not concern a high number of individuals. Can &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-impact-assessment\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Faq &#8211; Impact assessment&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/433"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=433"}],"version-history":[{"count":8,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/433\/revisions"}],"predecessor-version":[{"id":436,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/433\/revisions\/436"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}