---
title: "GDPR Recital 76: Risk Assessment"
url: "https://www.engagecompliance.co/law/gdpr/recital-76"
type: "legal-text"
date: ""
---
# GDPR Recital 76: Risk Assessment

The likelihood and severity of the risk to the rights and freedoms of the data subject should be determined by reference to the nature, scope, context and purposes of the processing. Risk should be evaluated on the basis of an objective assessment, by which it is established whether data processing operations involve a risk or a high risk.

## Articles this recital explains

- [Article 24](https://www.engagecompliance.co/law/gdpr/article-24): Responsibility of the controller
- [Article 32](https://www.engagecompliance.co/law/gdpr/article-32): Security of processing

Source text: EUR-Lex, Official Journal consolidated HTML (CELEX 32016R0679). Recital short titles are editorial labels from gdpr-info.eu editorial short titles (not official). Cross-checked against gdpr-info.eu (independent reproduction).