Processing that poses significant risks to individual rights, such as profiling or processing sensitive data (Article 35(3)).
