Identifying processing of CSS that is high risk (1)

A person conducting a business or undertaking at a workplace must assess the processing of a CSS carried out by the business or undertaking at the workplace to determine if the processing is high risk.