Assessing the Impact on Data Subjects Data controllers should then consider the nature of the data, the way the information is being processed, the reasonable expectations of the data subjects and ...