The Spanish data protection authority ('AEPD') launched, on 14 September 2022, a tool for analysing risk factors of personal data processing pursuant to the requirement mandated by the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), titled 'Evalúa_Riesgo RGPD'. In particular, the tool enables organisations to rapidly carry out a first, non-exhaustive assessment of the intrinsic risks stemming from data processing activities, indicating the necessity of performing a Data Protection Impact Assessment ('DPIA'), and facilitating residual risk management by suggesting measures and safeguards to mitigate said risks.

You can read the press release here and the tool here, both only available in Spanish.