Associates whose Privacy Projects which are not deemed to be high risk still have a general obligation under the GDPR to manage risks to individuals.
Sodelavci, katerih projekti varovanja zasebnosti se ne štejejo za visoko tvegane, imajo po GDPR še vedno splošno obveznost po zmanjševanju tveganj za posameznike.