Page tree
Skip to end of metadata
Go to start of metadata
No.Criteria (notes available)Yes/No
1Evaluation or scoringNo
2Automated-decision making with legal or similar significant effectNo
3Systematic monitoringNo
4Sensitive data or data of a highly personal natureNo
5Data processed on a large scaleNo
6Matching or combining datasetsNo
7Data concerning vulnerable data subjectsNo
8Innovative use or applying new technological or organisational solutionsNo

When the processing in itself "prevents data subjects from exercising a right or using a
service or a contract"


DPIA likely to be requiredNo

  • No labels


  1. Comments - don't forget we are ONLY doing an assessment of CENTRAL eduGAIN operations - not the entire supply chain.  It is up to each NREN to decide if a DPIA is needed for their delivery of eduGAIN.  Therefore the answers for eduGAIN central operations for 5. and 7. are NO, not YES.  I'd also argue that eduGAIN has been around for nearly 15 years so I am not sure if we can call it innovative anymore, but accept that people will see that differently.

    1. Thank you Nicole for your comment! I have update pre-evaluation accordingly.