Episode 8 of 10
DPIA: when you need one
A DPIA is required when processing is likely to be high risk, for example AI that judges people, processes sensitive data at scale or tracks people.
Check yourself
Which of these plans most likely needs a DPIA before you start?
AI that judges people is a typical reason for a DPIA. Invoices, status emails and notes usually are not.
Show text
02 · Basic
AI and the rules
The AI Act, Article 4 AI literacy and GDPR-proof AI in plain language: what a company of 10 to 100 people has to arrange, and what it does not.
0:39Ep. 1What is the AI Act?
0:39Ep. 2The four risk classes
0:40Ep. 3AI literacy: Article 4
0:37Ep. 4How to show it
0:41Ep. 5The AI register
0:36Ep. 6GDPR-proof AI: four checks
0:38Ep. 7'EU-hosted' is not the whole answer
0:39Ep. 8DPIA: when you need one
0:37Ep. 9Oversight that actually works
0:36Ep. 10An AI policy on one page
After this series you can:
- You place an AI use in a risk class and spot when it moves to high risk.
- You arrange per role what people learn about AI and who approves, and you record it.
- You put the four privacy questions to an AI supplier and spot when a DPIA is needed.