What the record establishes
This is a risk assessment, not a violation finding. It is published as context and excluded from counts and totals.
Sources
- Primary recordData protection impact assessment on Microsoft OfficeGovernment of the Netherlands · 7 November 2018 · accessed 11 August 2026