Complete a GDPR DPIA before processing: What must happen before processing begins?
A documented likely-high-risk finding requires a GDPR DPIA before processing begins.
The question
Under the GDPR in the EEA, a university research-administration unit will systematically monitor identifiable student records at large scale, including health-related absences. Its documented threshold review concludes that the processing is likely to result in high risk, and no GDPR DPIA has been completed. What must happen before processing begins?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Complete only a broad AI impact assessment covering the project.A broader assessment may supplement governance, but it does not substitute for the GDPR DPIA required by the stated threshold finding.
- Rely on the research purpose and security policy.Those materials do not assess this processing’s necessity, proportionality, risks, or safeguards as required by a DPIA.
- Complete a GDPR DPIA before processing. ✓Because the documented review finds likely high risk, GDPR Article 35 requires a DPIA before processing begins.
- Run a pseudonymized pilot first.A pilot may reduce exposure, but it does not replace the required DPIA when the processing is likely to result in high risk.
The trap
When the facts expressly establish likely high risk, select the Article 35 DPIA rather than a substitute assessment. How to remember it
A documented likely-high-risk finding requires a GDPR DPIA before processing begins.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Require an Article 28 processor arrangement: What procurement decision best addresses the evidence? →
- Consult the competent supervisory authority before launch: What must happen first? →
- Require a reviewer with authority: What control is needed? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.