Data Protection Commission confirms list of processing operations requiring a DPIA