Information Protection Affect Evaluation:[33] Where the controller undertakes a form of processing that is probably going to result in a large risk to your legal rights and freedoms of purely natural persons, the controller need to perform an affect evaluation of that processing, in consultation with any specified DPO. Even https://sites.google.com/view/gdpr-compliance-in-usa/data-privacy-compliance-in-saudi-arabia