Activities requiring Data Protection Impact Assessment under Luxembourg law

The Luxembourg National Data Protection Commission (Commission nationale pour la protection des données, CNPD) has published a list of processing operations which require a mandatory data protection impact assessment in accordance with article 35 of the General Data Protection Regulation (GDPR). What is a data protection impact assessment (DPIA)? A…