Are you planning to conduct a survey within your organisation? And do you sometimes wonder when you should or should not carry out a data protection impact assessment (DPIA)?

The Belgian Data Protection Authority (BDPA) published on Monday a decision of its Litigation Chamber that contains various tips in this respect, with a particular focus on the following questions:

  • Is personal data (including identification) needed for a survey? [data minimisation]
  • Does a privacy link in the footer suffice for information purposes? [information & transparency]
  • Is a data protection impact assessment (DPIA) required? [accountability]

Read on for the BDPA's answers.

Related articles

Cookie notification

This functionality uses third-party cookies. Change your cookie preferences to view this content or view more information.
These cookies ensure that the website works properly. These cookies cannot be disabled.
These cookies can be placed by third parties, such as YouTube or Vimeo.
By deactivating categories, it is possible that related functionalities within the website may no longer work properly. It is always possible to change your preferences at a later time. View more information.