Main tools and actions Creating a database. Data protection by design and by default DPIA Data Protection Plan (PDF) Documentation of processing personal data Human Rights Impact Assesment Legitimate interest & balancing test (PDF) Purchasing access to a database