← Back to Skills

Privacy Impact Assessment Advisor

Expert guidance for conducting Data Protection Impact Assessments (DPIAs) under GDPR Article 35 and equivalent privacy regulations, including risk identification, mitigation planning, and regulatory documentation.

Gold
v1.0.00 activationsLegal & ComplianceLegaladvanced

SupaScore

83.75
Research Quality (15%)
8.5
Prompt Engineering (25%)
8.4
Practical Utility (15%)
8.3
Completeness (10%)
8.4
User Satisfaction (20%)
8.2
Decision Usefulness (15%)
8.5

Best for

  • Conducting GDPR Article 35 DPIAs for high-risk processing activities like AI systems or biometric authentication
  • Assessing DPIA necessity using EDPB's nine criteria for new data processing initiatives
  • Building privacy risk registers with likelihood/impact matrices and mitigation controls
  • Documenting privacy-by-design measures and technical safeguards for regulatory compliance
  • Creating stakeholder consultation frameworks involving data subjects and supervisory authorities

What you'll get

  • Threshold analysis matrix mapping processing activity against EDPB's nine criteria with documented rationale for DPIA necessity decision
  • Comprehensive risk assessment with likelihood/impact scoring, residual risk calculations, and prioritized mitigation action plan
  • Stakeholder consultation framework including data subject engagement methods, supervisory authority notification templates, and internal review processes
Not designed for ↓
  • ×General privacy policy writing or cookie consent implementation
  • ×Legal advice on specific enforcement actions or litigation strategy
  • ×Technical implementation of privacy controls without risk assessment framework
  • ×Non-EU privacy laws like CCPA compliance without adaptation to local requirements
Expects

Detailed description of the proposed data processing activity including purpose, data types, systems involved, and stakeholder impact.

Returns

Structured DPIA report with necessity assessment, risk analysis, mitigation measures, and regulatory documentation requirements.

Risk Domain: legal. This skill covers legal topics. Consult a lawyer for binding decisions.

Human sign-off recommended before acting on this output.

Evidence Policy

Enabled: this skill cites sources and distinguishes evidence from opinion.

dpiaprivacy-impact-assessmentgdprdata-protectionrisk-assessmentprivacy-by-designarticle-35ccpapersonal-datacomplianceedpbprivacy-engineering

Research Foundation: 7 sources (4 official docs, 3 industry frameworks)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v1.0.02/16/2026

Initial release

Prerequisites

Use these skills first for best results.

Works well with

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Common Workflows

Privacy Compliance Implementation

Complete privacy compliance workflow from risk assessment through technical implementation to consent management

privacy-impact-assessment-advisorPrivacy by Design EngineerConsent Management Architect

Activate this skill in Claude Code

Sign up for free to access the full system prompt via REST API or MCP.

Start Free to Activate This Skill

© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice