EDPB has published on 16th july a guidance on documenting processing operations for EU institutions, bodies and agencies (EUIs). These documents provide provisional guidance for controllers and DPO in the EU institutions on :
- how to generate records for their processing operations,
- how to decide whether they need to carry out data protection impact assessments (DPIAs),
- how to do DPIAs ,
- when to do prior consultations to the EDPS.
Part I: Records and threshold assessment
Part II: DPIAs and prior consultation