Hi !
Happy New Year! We in the national DPIA projects are back from the Christmas holidays.
But before we fully get going with the new year, let’s remind ourselves of something we wrapped up just before Christmas: our publication on gathering the data subject’s views.
We’ve said this before, but we’ll say it again: it’s always a good idea to gather the data subject’s views as early in a DPIA process as possible.
Not only because, in the vast majority of cases, it is a requirement (see GDPR Article 35(9) — it takes quite a lot for this not to be relevant), but also because it gives you, as the controller, useful information that you can incorporate into your assessments of privacy impacts.
It can quite simply point you in the right direction straight away. To truly succeed with the interviews, it’s wise to spend time formulating questions that are easy for those being interviewed to understand.
Data subjects will tell you what they are concerned about from a privacy perspective, and that can translate into good risk scenarios.
You can read the report, where we have summarized what the data subjects think, here.
In connection with the launch of the report, we held a webinar. There, we shared tips and tricks on how to gather the data subject’s views — which you can use as inspiration if you are going to do the same in connection with a DPIA.
We also briefly presented the privacy concerns raised by the data subjects (students, guardians as students’ representatives, teachers and other employees).
Watch the recording here.
I wish you a wonderful, privacy-friendly week-end!
Best regards,
Ida Thorsrud
Project manager national DPIA
This newsletter was translated from Norwegian to English with assistance from ChatGPT by OpenAI. While it guided our translation, we made independent editorial choices. Any discrepancies result from this combined approach.