According to the circumstances of each specific case for which the PVZLP is drawn up, the controller may request an opinion from the subjects of personal data or their representatives, through different means, depending on the situation (for example, a general study related to the purpose and means of the processing process, by asking questions to the representatives of the subjects of personal data, or through surveys that are sent to future customers of the controller).
When the final decision of the controller differs from the opinion of the subjects of personal data, the reasons for continuing or stopping the processing of personal data must be documented during the PVZLP process.
When the controller decides not to request an opinion from the subjects of personal data (for example, if this would jeopardize the confidentiality of the work plans in the organization or the same is disproportionate or unfeasible), the rationale for such a decision should be documented during the PVZLP process.
