DPIA
The Data Protection Impact Assessment (DPIA) is a compliance process required by the GDPR that carries out a systematic risk assessment before processing activities that may present a high risk to the rights and freedoms of individuals.
Timeline (last 90 days)
Self-hosting open-weight models can eliminate external processors, vendor training risk and international transfer issues, but the user is still the data controller, and the DPIA, legal basis and AI Act classification still apply.
AI System Impact Assessment (AISIA) has origins and overlaps with Data Protection Impact Assessment (DPIA) and Algorithmic Impact Assessment (AIA), but covers a broader scope.
The Data Protection Impact Assessment (DPIA) required under Article 35 of the GDPR is a mandatory compliance process for high-risk data processing activities.
All Facts (3)
Self-hosting open-weight models can eliminate external processors, vendor training risk and international transfer issues, but the user is still the data controller, and the DPIA, legal basis and AI Act classification still apply.
50%UnverifiedAI System Impact Assessment (AISIA) has origins and overlaps with Data Protection Impact Assessment (DPIA) and Algorithmic Impact Assessment (AIA), but covers a broader scope.
50%UnverifiedThe Data Protection Impact Assessment (DPIA) required under Article 35 of the GDPR is a mandatory compliance process for high-risk data processing activities.
50%