High-Risk Processing
What is High-Risk Processing?
Data processing activities that pose a significant risk to the rights and freedoms of individuals, requiring enhanced safeguards and impact assessments.
Terms that appear alongside high-risk processing
Each of these is named in at least one of the same controls as high-risk processing. The number is how many controls name both.
- data protection 40 shared controls
- impact assessment 29 shared controls
- gdpr 23 shared controls
- data protection impact assessment 22 shared controls
- profiling 20 shared controls
- privacy by design 16 shared controls
- consent 14 shared controls
- governance 14 shared controls
Frameworks that govern high-risk processing
What the standards actually require on high-risk processing
Requirements naming high-risk processing across 6 standards, quoted from the control text.
Where a type of processing, particularly with new technologies, probably creates a substantial risk for data subjects' protected interests, the controller first assesses its impact before processing (jointly for similar operations), involves the Federal Commis...
germany-federal-data-protection-act-bdsg::s67 · s 67 Assess the impact before high-risk processing and involve the Federal Commissioner →Before high-risk CSS processing begins, a PCBU ensures a silica risk control plan is prepared (or already prepared by another person) that identifies all high-risk processing, includes the r 529CA risk assessments, documents the controls and how they will be i...
australia-model-work-health-and-safety-regulations::r529CB-529CC · rr 529CB and 529CC Prepare a silica risk control plan for high-risk processing and follow it →Section 34 of the Jamaica Data Protection Act 2020 establishes Privacy by Design + Privacy by Default + and Data Protection Impact Assessment (DPIA) requirements.
JM-DPA2020-Privacy-by-Design-Default-Sec34-Engineering-Data-Protection-Impact-Assessment-DPIA-Risk-Based · Jamaica DPA 2020 Privacy by Design + Privacy by Default + Section 34 + Data Protection Impact Assessment (DPIA) + Risk-Based + High-Risk Processing + Prior Consultation + Privacy Engineering →Before processing likely to result in a high risk to rights and freedoms, particularly with new technologies, the controller must assess the impact of the envisaged operations (one assessment may cover similar high-risk operations;
albania-law-no-124-2024-on-personal-data-protection::31 · Article 31: data protection impact assessment for high-risk processing →Any business, whatever its size, must carry out a risk assessment before starting processing that the regulation treats as a significant privacy risk: selling or sharing personal information;
ccpa-cpra::CCR 7150 · Conduct a risk assessment before high-risk processing →Before processing that uses modern technologies posing a high risk to the privacy and confidentiality of personal data, the controller must assess the impact on personal data protection, taking account of the nature, scope and purposes of processing.
federal-decree-law-no-45-of-2021-on-the-protection-of-personal-data-uae-pdpl::21(1) · Articles 21(1) and 21(2): impact assessment before high-risk processing →Questions people ask about high-risk processing
What is High-Risk Processing?
Why is High-Risk Processing important for compliance?
Which compliance frameworks address High-Risk Processing?
Where can I learn more about High-Risk Processing?
See how High-Risk Processing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.