PVZLP is optional in the following situations:
- when the processing operation may correspond to the cases listed in Article 4 of the Rulebook on the process of assessing the impact of the protection of personal data (“Official Gazette of the Republic of North Macedonia” no. 122/20) , but the controller has assessed that it is unlikely to result with high risk.
- when the nature, scope, context and purposes of the processing are similar to the processing for which the GDPR was implemented.
- when processing is included in the list of types of processing operations for which PVZLP is not required established by the Agency.
The controller must necessarily justify and document the reasons for non-execution of the PVZLP and enter the opinion of the personal data protection officer.
