On July 17, 2019, the European Data Protection Supervisor (EDPS) adopted its list of the kinds of processing operations that require and those that do not require a data protection impact assessment under Articles 39(4) and (5) of Regulation (EU) 2018/1725.