BSA Urges European Regulators to Keep Data Protection Impact Assessments Practical and Risk-Based

Дата публикации: 05-06-2026 08:49:50

BSA Urges European Regulators to Keep Data Protection Impact Assessments Practical and Risk-Based
BRUSSELS — The Business Software Alliance (BSA) has called on the European Data Protection Board (EDPB) to ensure its new voluntary Data Protection Impact Assessment (DPIA) template remains flexible, risk-based, and practical to implement across different organizations and processing activities.In its response to the EDPB's public consultation, BSA welcomed efforts to promote greater consistency in GDPR compliance across the EU, while cautioning against a "check-the-box" approach to DPIAs."The goal of a DPIA is to identify and mitigate risks to individuals' rights and freedoms," said Irma Gudžiūnaitė, Director, Policy – EMEA at BSA. "The EDPB's initiative can improve consistency across the EU, but the final template should remain flexible, proportionate, and focused on actual privacy risks. Organizations should be able to tailor assessments to the nature of their processing activities rather than excessive documentation requirements."BSA's submission highlights five priorities: preserving flexibility, reinforcing the risk-based nature of DPIAs, providing greater clarity on when they are required, ensuring proportionality, and promoting interoperability with other regulatory frameworks.BSA noted that some elements of the draft template—such as detailed requirements on technical infrastructure, data quality metrics, and assessments of alternative approaches—may exceed what Article 35 GDPR requires. The association also called for greater certainty on when a DPIA is necessary.To avoid duplicative compliance efforts, BSA emphasized that organizations should be able to build on assessments conducted under other frameworks, including the EU AI Act, and supplement them where needed. BSA also supports the proposed Digital Omnibus amendments to Article 35 GDPR, which would help harmonize DPIA requirements across the EU and provide greater legal certainty.The consultation is particularly important because national data protection authorities may align their own templates with the EDPB model, making the final template a de facto standard for privacy risk assessments and GDPR compliance across Europe.
 
laurav
Fri, 06/05/2026 - 04:49

Основное содержимое страницы с новостью.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	BSA Raises Concerns About Key Elements of the EU Cloud and AI Development Act	0	3.82	03-06-2026
2	BSA Calls for Clearer Allocation of Responsibilities in EU AI Transparency Guidelines	0	9.3	03-06-2026
3	Rabbi-Meir-Kahane-on-Leftists	0	0	03-02-2020
4	Багаевская: Ночь 18 дек, Вт	0	0	17-12-2018
5	Багаевская: Утро 18 дек, Вт	0	0	17-12-2018
6	ISL | Bengaluru will be keen on regaining consistency as it faces Mohammedan	0	0	10-01-2025
7	В Железнодорожном округе Курска сгорел автомобиль	0	0	10-03-2023
8	Fate of Internet May Hang With Supreme Court Case	0	0	08-02-2023
9	Как получить субсидию за наём работника? Главное условие – взять ...	0	0	20-02-2025
10	Israel leads OECD countries in preventive medicine	0	0	11-02-2020

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 8.32. Источник: www.bsa.org.