Record rule of 10

You can enter a rule of 10 for your processing activity to determine whether a high risk is expected and a Data Protection Impact Assessment is necessary. You enter the rule using a form in which you answer ten questions with yes or no.

Instructions:

1. Navigate to a processing activity

2. Click on

3. Click on the entry Record rule of 10:

   

4. Answer the questions in the form by selecting Yes or No:

   

5. Click on Record rule of 10 in the form

Results:

• In the Rule of 10 view you can see the summary of the rule of 10.

  

• In the Rule of 10 result column, you can see how Aeneis has classified the risk.

  Note: If Aeneis expects a high risk as a Rule of 10 result, Aeneis recommends carrying out a Data Protection Impact Assessment (DPIA) in the Default view of the processing activity in the Note on the creation of a DPIA section. See Data Protection Impact Assessments.

Revise the rule of 10

You can revise the rule of 10 again using the status chip in the Rule of 10 view of the processing activity.