(93) By adopting a law which is intended to be the basis for the performance of tasks by a public authority or body and which is intended to regulate a specific processing operation or set of operations, Member States may consider that such an assessment should be carried out before such processing operations.
„GDPR covers one of our employees, it's just a few documents”
Are you sure about that?

