(European Comission)
CNIL Privacy Impact Assessment Knowledge Bases
https://www.cnil.fr/sites/default/files/atoms/files/cnil-pia-3-en-knowledgebases.pdf
I keep going back to this resource, as it has a good set of examples for privacy risks.
But it also has a long catalog of technical and organizational measures (TOM).
Transport for London’s Data Protection Impact Assessment and Privacy Notice for Wifi Tracking
Very interesting , also as it’s public and both, the Data Protection Impact Assessment and the Privacy Notice complement each other.
https://tfl.gov.uk/corporate/privacy-and-cookies/wi-fi-data-collection
CNIL: DPIA tools (templates and knowledge bases)
This is one of my favorite documents that I refer to on a day to day basis.
Nice list of privacy risks and severity examples.
https://www.cnil.fr/sites/default/files/typo/document/CNIL-PIA-2-Tools.pdf