dpia-generation

A DPIA is required under UK GDPR Article 35 when processing involves mandatory triggers like novel technology, large-scale profiling, or children's data. This Skill validates your scenario against ICO guidance and Article 35(3) criteria to confirm if an assessment is mandatory.

Generate a UK GDPR DPIA by validating mandatory triggers, assessing residual risk, and applying DPO consultation requirements. This Skill drafts an ICO-structured assessment and automatically flags when Article 36 prior consultation with the ICO is needed due to remaining high risk.

Yes, DPO consultation is required under Article 35(2) for high-risk processing. This Skill captures DPO consultation requirements during the DPIA generation process and includes them in the final ICO-structured house-style output document.

Document residual risk by evaluating design-specific threats and tracking mitigations in a table with owners and due dates. This Skill produces a house-style DPIA featuring a residual risk assessment and a structured mitigations table to ensure clear sign-off conditions.

Yes, change-aware drafting uses prior triage results, earlier DPIAs, and vendor review findings to prevent contradictory conclusions for overlapping processing activities. This ensures your Article 35 assessment remains consistent with existing privacy evaluations.

Yes, this DPIA generation process applies to children's data signals and novel technology use. It evaluates these scenarios against ICO mandatory triggers to determine if a full Article 35 Data Protection Impact Assessment is legally required.