PVZLP must contain:

  • a description of the intended processing operations and the purposes of the processing;
  • assessment of the necessity and proportionality of the processing;
  • assessment of the risks for the rights and freedoms of the subjects of personal data;
  • measures provided for:
  • risk management;
  • demonstrating compliance with personal data protection regulations.

Graphic representation of the general iterative process for the implementation of the PVZLP

Note : Each of the phases will need to be implemented several times before the PVZLP is completed.