MedTech Europe responds to EU consultation on data protection impact assessment tool

MedTech Europe has submitted its response to a public consultation by the European Data Protection Board (EDPB) on a proposed template for Data Protection Impact Assessments (DPIAs). DPIAs are risk assessment tools that organisations must use when processing personal data, including in areas such as digital health and the use of health data.

While supporting the objective of improving consistency across the EU, MedTech Europe stresses that the proposed template must remain practical and proportionate for companies. In particular, the association calls on the EDPB to:

• Clearly confirm that the template remains optional;
• Allow flexibility for existing company practices;
• Provide more practical guidance to support real-world implementation.

Read our full contribution below.