Gesetz: DSGVO 36 
Data Pro­tec­tion Impact Assess­ment: Gui­de­lines of the Artic­le 29 Working Par­ty (draft)