Opinion 26/2018 on the draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)

 https://edpb.europa.eu/sites/edpb/files/files/file1/2018-12-04-opinion_2018-26_art._64_lu_sas_dpia_list_en.pdf