Riko Best – stock.adobe.com. He was an amazing person. Get out. I’m not sure. Last updated on May 6, 2026. Many companies view data protection documentation unfavorably and consider it a significant cost, as regular surveys by the Bitkom Digital Association confirm. Moreover, certain aspects of this documentation are not only seen as time-consuming, but also present genuine difficulties in their practical implementation. An example of this is the conduct and recording of a Data Protection Impact Assessment (DPIA). This risk analysis in the field of data protection suffers from the same problem as many other risk assessments: the identification and estimation of risks seems so complex that companies either carry out the analysis too superficially or skip it altogether. In the field of data protection, however, a Data Protection Impact Assessment is not optional, but in certain cases mandatory. The Federal Data Protection Officer explains: “A DPIA is necessary when the processing of personal data is likely to present a high risk”. It must describe the processing activities, assess their necessity and proportionality, and establish appropriate measures to reduce the risks to the rights and freedoms of individuals. The supervisory authorities draw up templates for data protection documentation.
ComputerWeekly.de