# DPIA Register -- Quarterly Management Report

## Register Details

| Field | Value |
|-------|-------|
| Organisation | Meridian Financial Services AG |
| Register Owner | Dr. Laura Engel, Group DPO |
| Report Date | 2026-03-16 |
| Report Period | Q1 2026 |
| Total DPIAs in Register | 7 |

---

## Status Distribution

| Status | Count | Percentage |
|--------|-------|-----------|
| Active Monitoring | 3 | 43% |
| Requires Update | 1 | 14% |
| Prior Consultation Pending | 1 | 14% |
| Draft | 1 | 14% |
| Archived | 1 | 14% |

---

## Risk Level Distribution (Active DPIAs Only)

| Risk Level | Count | DPIAs |
|-----------|-------|-------|
| Very High | 1 | DPIA-COMP-2026-001 (AML AI Monitoring) |
| High | 2 | DPIA-RISK-2025-001 (Credit Scoring), DPIA-OPS-2024-012 (Call Recording) |
| Medium | 1 | DPIA-HR-2025-003 (Biometric Access) |
| Low | 0 | -- |

---

## Overdue Reviews

| DPIA Reference | Processing Activity | Due Date | Days Overdue | Risk Level | Action |
|----------------|-------------------|----------|-------------|------------|--------|
| None | -- | -- | -- | -- | All reviews current |

---

## DPIAs Requiring Action

### DPIA-MKTG-2025-007: Requires Update

| Field | Value |
|-------|-------|
| Processing Activity | Real-Time Customer Profiling for Personalised Offers |
| Trigger | Technology change -- vendor migrating to new ML platform |
| Risk Level | High |
| Action Required | Reassess automated decision-making safeguards for new ML platform |
| Target Date | 2026-04-15 |
| Assigned To | Felix Hartmann, Marketing Privacy Lead |

### DPIA-COMP-2026-001: Prior Consultation Pending

| Field | Value |
|-------|-------|
| Processing Activity | AML Transaction Monitoring Enhancement (AI-Based) |
| SA Submission Date | 2026-03-01 |
| SA Reference | BfDI-2026-PC-0847 |
| Expected Response | By 2026-04-26 (8-week period) |
| Risk Level | Very High |
| Action | Await SA response; do not commence processing |

### DPIA-IT-2026-002: In Draft

| Field | Value |
|-------|-------|
| Processing Activity | Cloud Migration of Customer Database to AWS Frankfurt |
| DPIA Lead | Robert Klein, Cloud Architect |
| Target Completion | 2026-04-10 |
| Outstanding | DPO consultation required; RoPA linkage pending |

---

## Art. 36 Prior Consultation Summary

| Field | Value |
|-------|-------|
| Total Required (All Time) | 1 |
| Submitted | 1 |
| Responses Received | 0 |
| Pending Response | 1 (DPIA-COMP-2026-001) |
| Conditions Outstanding | 0 |

---

## Register Completeness Assessment

| Finding Severity | Count |
|-----------------|-------|
| Critical | 0 |
| High | 0 |
| Medium | 1 |

| Severity | Reference | Finding |
|----------|-----------|---------|
| Medium | DPIA-IT-2026-002 | DPIA not yet linked to RoPA entry (Art. 30 cross-reference missing) |

---

## Review Schedule (Next 6 Months)

| DPIA Reference | Processing Activity | Review Due | Risk Level |
|----------------|-------------------|-----------|------------|
| DPIA-MKTG-2025-007 | Customer Profiling | 2026-04-01 | High (triggered by technology change) |
| DPIA-RISK-2025-001 | Credit Scoring Algorithm | 2026-06-15 | High |

---

## Recommendations

1. **DPIA-MKTG-2025-007**: Prioritise reassessment before vendor ML platform migration completes. Ensure Art. 22 automated decision-making safeguards are re-evaluated for new platform.

2. **DPIA-COMP-2026-001**: Monitor BfDI response timeline. Prepare contingency plan if SA requests additional information or imposes conditions.

3. **DPIA-IT-2026-002**: Ensure DPO is consulted before cloud migration assessment is finalised. Create RoPA entry for new cloud-hosted processing.

4. **Register Governance**: Schedule annual register health check for Q4 2026 to verify all entries are current, linked, and reviewed on schedule.

---

## Sign-Off

| Role | Name | Date |
|------|------|------|
| Group DPO | Dr. Laura Engel | 2026-03-16 |
| Head of Privacy Engineering | Markus Bauer | 2026-03-16 |
| Chief Risk Officer | Dr. Hans Mueller | 2026-03-16 |