Versatile AI Risk Assessment

Glossary Governance and evidence

DPIA threshold analysis

Screening under Art. 35 GDPR: does the processing need a full impact assessment?

As of: September 2026 · Glossary with 28 terms

What is DPIA threshold analysis?

The threshold analysis is the screening step before a data protection impact assessment under Art. 35 GDPR: it clarifies in a structured way whether a processing operation is likely to pose a high risk to data subjects and therefore requires a full DPIA. Criteria include new technologies, extensive profiling and special categories of data.

Generative AI adds questions of its own: prompt transfers to third parties, purpose limitation for training and context data, and the traceability of automated output. A documented review path makes the decision defensible towards supervisory authorities.

Art. 35 GDPREDPBDSGVO-Check

More terms from the subject area Governance and evidence.

EU AI Act risk classes Classification of AI systems by risk, from prohibited practices to minimal risk. TOMs: technical and organisational measures Technical and organisational safeguards under Art. 32 GDPR, appropriate to the risk. Residual risk and risk acceptance The risk remaining after countermeasures have been implemented. The responsible people decide whether to accept it or take further action.

From the term into the substance

The link leads to the place on the website where the term becomes practical; the overview shows every term in the glossary by subject area.

Start the DSGVO-Check as a free single module All terms in the glossary

Cite this term

For reports, policies or internal documents; the link leads directly to this term page.

“DPIA threshold analysis”. Versatile AI Risk Assessment, glossary of AI risk analysis, as of September 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/glossary/dsfa-schwellenwertanalyse/

← Back to the glossary