Mónica Oliveira Costa and Ana Carolina Santos comment on the recent public consultation launched by the Portuguese Supervisory Authority on the list of the processing operations that require a Data Protection Impact Assessment