The Spanish data protection authority – AEPD – has published a Model Data Protection Impact Assessment ‘DPIA) Report for the Private Sector. it includes the factors that must be taken into account by the private sector in order to perform a DPIA, including the description of the data processing activity, its purpose and legal basis, as well as risk mitigating measures.
Opinion 06/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC
This Opinion analyses the criteria set down in Article 7 of Directive 95/46/EC for making data processing legitimate.