사용 방법
- 설치 명령을 복사하고 자신의 에이전트 환경에 설치하기 전에 소스 패키지를 확인하세요.
- 필요한 도구, 인증 정보, 지원 환경은 원본 문서에서 확인하세요.
- 입력과 원하는 산출물을 설명하고 출처와 결과를 대조하세요.
npx skills add https://github.com/mukul975/privacy-data-protection-skills --skill dpia-stakeholder-consult시작 전 확인
- 설치에는 모델 구독, API 한도, 파일 접근 권한이 포함되지 않습니다.
- 별점 수와 설치 수는 활동 지표이며 독립적인 품질·보안 검증이 아닙니다.
원본 저장소의 제목, 예시, 코드, 표, 링크, 이미지를 유지해 표시합니다.
DPIA Stakeholder Consultation
Overview
Article 35(9) GDPR requires that controllers "shall, where appropriate, seek the views of data subjects or their representatives on the intended processing, without prejudice to the protection of commercial or public interests or the security of processing operations." This skill provides a structured approach to meeting this obligation.
Legal Requirements
Art. 35(9) -- Data Subject Consultation
The controller must seek data subject views "where appropriate." EDPB WP248rev.01 clarifies that failure to consult must be justified and documented.
Art. 35(2) -- DPO Involvement
"The controller shall seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment."
Art. 36(1) -- Prior Consultation Context
Where prior consultation with the supervisory authority is required, evidence of stakeholder consultation strengthens the submission.
Consultation Methods
| Method | Suitability | Scale | Cost |
|---|---|---|---|
| Focus groups | Deep qualitative insight | Small (8-12 participants) | Medium |
| Online surveys | Broad quantitative data | Large (hundreds+) | Low |
| Written consultation | Formal, documented responses | Medium | Low |
| Public meetings | Community engagement | Medium-Large | Medium |
| Representative body engagement | Sector-specific expertise | Varies | Low |
| Advisory panel | Ongoing input | Small (5-10 members) | Medium |
| User testing with privacy lens | Practical usability insight | Small-Medium | High |
Consultation Process
Step 1: Determine Appropriateness
- Assess whether consultation is feasible without compromising security
- Document any reasons for not consulting (Art. 35(9) exemption)
- Consider proportionality: scale of processing vs consultation effort
Step 2: Identify Stakeholders
- Direct data subjects (or representative sample)
- Data subject representative bodies (consumer associations, patient groups, trade unions)
- Data Protection Officer
- Processor representatives
- Relevant internal stakeholders (IT security, legal, business unit)
Step 3: Design Consultation
- Select appropriate method(s) from the table above
- Prepare accessible consultation materials explaining the processing
- Define the specific questions or areas for input
- Set timeline and response deadlines
Step 4: Execute and Document
- Conduct consultation activities
- Record all views received
- Analyse feedback for themes and concerns
- Document how feedback influenced the DPIA outcome
Step 5: Feedback Loop
- Inform consultees of the outcome and actions taken
- Explain where their views were incorporated or why they were not
- Maintain ongoing engagement channel for future DPIA reviews
