dpia-mitigation-plan

name	dpia-mitigation-plan
description	Structures risk mitigation planning and residual risk tracking for Data Protection Impact Assessments under GDPR Article 35(7)(d). Covers mitigation measure identification, implementation tracking, residual risk acceptance, and Art. 36 prior consultation triggers. Keywords: DPIA mitigation, risk treatment, residual risk, Art. 35(7)(d), safeguards, mitigation tracking, prior consultation.
license	Apache-2.0
metadata	{"author":"mukul975","version":"1.0","domain":"privacy","subdomain":"privacy-impact-assessment","tags":"dpia-mitigation, risk-treatment, residual-risk, art-35-7d, safeguards"}

DPIA Mitigation Planning

Overview

Article 35(7)(d) GDPR requires a DPIA to include "the measures envisaged to address the risks, including safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation." This skill provides a structured mitigation planning framework.

Mitigation Strategy Categories

Technical Measures

Category	Examples	GDPR Reference
Encryption	At-rest, in-transit, end-to-end	Art. 32(1)(a)
Pseudonymisation	Tokenisation, hashing, key-coded	Art. 25(1), Art. 32(1)(a)
Access controls	RBAC, MFA, privileged access management