A process to identify and minimize risks to personal data in high-risk processing activities, such as profiling (Article 35).
