The WP29 has released its Data Protection Impact Assessment (DPIA) guidelines for consultation. The guidance provides businesses and other organisations with an indication of the types of situations in which they will be required to conduct a DPIA under the GDPR. Such situations may include the use of a camera system to monitor driving behaviour on motorways or a company monitoring its employees' internet activity and work stations. By contrast, the WP29 suggests that a DPIA will not necessarily be required in some situations, such as where an online magazine uses a mailing list to send a generic daily digest to subscribers or when an e-commerce website displays adverts for vintage cars involving limited profiling based on past purchase behaviour on its website. The consultation will remain open until 23 May 2017, after which the WP29 will finalise its DPIA guidance.