A process to identify and minimise risks to personal data in high-risk processing activities, such as profiling (Article 35).
