The tool EVALUATES _ RISK RGPD aims to assist law enforcement officials and to identify risk factors for rights and freedoms of individuals whose data are present in the treatment, the first evaluation of the inherent risk, including the need for a EIPD, and to estimate the residual risk if used measures and guarantees to mitigate the specific risk factors.
The purpose of this tool is to support responsible and managers in the risk management process for the rights and freedoms and, where appropriate, the realization of the EIPD, in line with the guide of "
Risk management and impact assessment on treatment of personal data
"published by the AEPD.
Risk factors made in this tool (available at ZIP format
here
), are not exhaustive, but, responsible and shall identify those that are specific for the treatment and to include it in its assessment.
The assessment of the threat level for each factor is the tool, as well as the final calculation of level of risk, is general and minimum includes an assessment that, if any, will need to be adjusted by the responsible for determining the level of risk of treatment with precision.
