Deploying Federated Learning solutions in real life often requires careful analysis and approval of a variety of legal entities. As part of these processes, we at IKNL have written a Data Protection Impact Assessment (DPIA), which you can find here
We are always open to improving this document (and vantage6, overall). So if you have any ideas, suggestions, or feedback, please don't hesitate to contact us.
Disclaimer: please note that the current DPIA was executed by IKNL and is specific for its situation. It can be used as an example by other organizations, but it cannot be used verbatim.