It does look like you'd be required to perform a data protection impact assessment every two years and submit a report on it. Likely your report won't be compli

It does look like you'd be required to perform a data protection impact assessment every two years and submit a report on it. Likely your report won't be complicated because there will be very little impact, but you'll still have to file the paperwork and maintain records to be able to prove that you did the work and that the required updates were performed on schedule without fail.