# Privacy Threshold Analysis

## Reference: PTA-QLH-2026-0015

| Field | Value |
|-------|-------|
| Processing Activity | Patient Satisfaction Survey Analytics Dashboard |
| Processing Owner | Dr. Lisa Bergmann, Head of Clinical Operations |
| Date | 2026-03-14 |
| DPO Reviewer | Dr. Elena Vasquez |

---

## Section A: Art. 35(3) Mandatory Triggers

| Question | Answer |
|----------|--------|
| A1: Systematic profiling with significant effects? | No |
| A2: Large-scale special category data? | No |
| A3: Systematic public area monitoring? | No |
| A4: On national SA DPIA required list? | No |

**Section A Result: No mandatory triggers met.**

## Section B: EDPB WP248rev.01 Criteria

| Criterion | Answer | Justification |
|-----------|--------|---------------|
| B1: Evaluation/scoring | No | Dashboard displays aggregate satisfaction trends, not individual scores |
| B2: Automated decision-making | No | No automated decisions about patients |
| B3: Systematic monitoring | No | Voluntary one-time surveys, not continuous monitoring |
| B4: Sensitive/highly personal data | No | Satisfaction ratings (1-5 scale) and free-text comments; no health data |
| B5: Large scale | No | 4,000 surveys per year across 3 clinical sites |
| B6: Matching datasets | No | Single source (SurveyMonkey), no combination with clinical data |
| B7: Vulnerable data subjects | **Yes** | Patients are vulnerable data subjects due to health context |
| B8: Innovative technology | No | Standard survey platform and analytics dashboard |
| B9: Preventing exercise of rights | No | Survey is voluntary; non-participation has no consequences |

**Section B Result: 1 criterion met (B7).**

## Section C: Additional Risk Factors

| Factor | Answer |
|--------|--------|
| C1: International transfers? | No |
| C2: New processing activity? | Yes |
| C3: Enforcement against similar processing? | No |
| C4: Real-time processing? | No |

**Section C Result: 1 additional factor (C2).**

---

## Determination

**DPIA recommended** — 1 EDPB criterion met (vulnerable data subjects) plus 1 additional risk factor (new activity).

## DPO Decision

After reviewing the PTA, I determine that a full DPIA is not required for this processing activity because: (1) the survey is voluntary, (2) data is pseudonymised, (3) no health data is collected, (4) aggregate analytics only, (5) standard technology. However, the following conditions apply:

1. Survey responses must not be linked to patient clinical records.
2. Free-text comments must be reviewed and redacted for any health information before inclusion in the dashboard.
3. Data retention limited to 24 months with automated deletion.
4. PTA to be re-screened if the survey scope changes to include health outcomes or clinical data.

**DPO Sign-Off**: Dr. Elena Vasquez — 2026-03-14 — Processing approved without full DPIA.