What does the Controller need to do before carrying out data processing operations?
The Controller needs to evaluate the impact of the proposed processing operations on the protection of Personal Data, especially when using modern technologies that pose a high risk to the privacy and confidentiality of the Data Subject's Personal Data.