Recital 76
EU GDPR

(76) The likelihood and severity of the risk to the rights and freedoms of the data subject should be determined by reference to the nature, scope, context and purposes of the processing.

Risk should be evaluated on the basis of an objective assessment, by which it is established whether data processing operations involve a risk or a high risk.
=> Dossier: Risk For Rights And Freedoms

NEW: The practical guide PrivazyPlan® explains all dataprotection obligations and helps you to be compliant. Click here!