From privacy-impact-assessment-skills
Guides data subject and stakeholder consultation requirements for GDPR DPIA under Article 35(9), including planning, engagement methods, DPO involvement, and documentation.
npx claudepluginhub mukul975/privacy-data-protection-skills --plugin privacy-impact-assessment-skillsThis skill uses the workspace's default tool permissions.
Article 35(9) GDPR requires that controllers "shall, where appropriate, seek the views of data subjects or their representatives on the intended processing, without prejudice to the protection of commercial or public interests or the security of processing operations." This skill provides a structured approach to meeting this obligation.
Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.
Guides building MCP servers enabling LLMs to interact with external services via tools. Covers best practices, TypeScript/Node (MCP SDK), Python (FastMCP).
Generates original PNG/PDF visual art via design philosophy manifestos for posters, graphics, and static designs on user request.
Article 35(9) GDPR requires that controllers "shall, where appropriate, seek the views of data subjects or their representatives on the intended processing, without prejudice to the protection of commercial or public interests or the security of processing operations." This skill provides a structured approach to meeting this obligation.
The controller must seek data subject views "where appropriate." EDPB WP248rev.01 clarifies that failure to consult must be justified and documented.
"The controller shall seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment."
Where prior consultation with the supervisory authority is required, evidence of stakeholder consultation strengthens the submission.
| Method | Suitability | Scale | Cost |
|---|---|---|---|
| Focus groups | Deep qualitative insight | Small (8-12 participants) | Medium |
| Online surveys | Broad quantitative data | Large (hundreds+) | Low |
| Written consultation | Formal, documented responses | Medium | Low |
| Public meetings | Community engagement | Medium-Large | Medium |
| Representative body engagement | Sector-specific expertise | Varies | Low |
| Advisory panel | Ongoing input | Small (5-10 members) | Medium |
| User testing with privacy lens | Practical usability insight | Small-Medium | High |