Article 70 – Tasks of the Board

issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for further specifying the criteria and conditions for decisions based on profiling pursuant to Article 22(1);

establish a list of the kind of processing operations which are subject to the requirement for a data protection impact assessment and for which no data protection impact assessment is required, pursuant to Article 35.

haa establish a list of the circumstances in which a personal data breach is likely to result in a high risk to the rights and freedoms of a natural person pursuant to Article 33 and a list of the circumstances in which it is not likely to result in such a high risk.

prepare and transmit to the Commission a common template and a common methodology for conducting data protection impact assessments, pursuant to Article 35.

prepare and transmit to the Commission a common template for notifying a personal data breach to the competent supervisory authority pursuant to Article 33.

issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for the purpose of further specifying the appropriate technical and organisational measures to ensure a level of security appropriate to the level of risk pursuant to Article 32.

issue the opinion on the application of pseudonymisation and anonymisation referred to in Article 25a.’