http://publica.fraunhofer.de/starweb/servlet.starweb?path=urn.web&search=urn:nbn:de:0011-n-586394-15
Volltext (Online):
http://publica.fraunhofer.de/eprints/urn_nbn_de_0011-n-586394-15.pdf
[protecting people by good design, solid security, efficient processes and trusted services]
“Commissioned by the Ministry of Justice and Security, Privacy Company investigated the privacy risks of G Suite Enterprise, with work and communication apps such as Gmail, Chat, Meet, Forms, Docs and Slides. Meanwhile, Google has renamed these services into Google Workspace.”
Related:
Interesting report that also points out the wide variety in DPIA formats and sizes.
It also talks about specific passages and questions used.
https://edps.europa.eu/sites/edp/files/publication/20-07-06_edps_dpias_survey_en.pdf
Additional EDPS guidance:
Very interesting , also as it’s public and both, the Data Protection Impact Assessment and the Privacy Notice complement each other.
https://tfl.gov.uk/corporate/privacy-and-cookies/wi-fi-data-collection
I’m not sure how much “moderation”, you can read in this. – Also, have a look at how they addressed their “cookie notice” on the page.
https://www.cnil.fr/fr/rgpd-comment-la-cnil-vous-accompagne-dans-cette-periode-transitoire