Chapter 4 · Controller and Processor

Article 36Prior consultation

All 99 Articles Chapter 4: Controller and Processor

If a DPIA shows a high residual risk you cannot mitigate, you must consult your supervisory authority before going ahead.

Read the official text on EUR-Lex

Related articles

These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.

Need to apply Article 36?

Our data-protection lawyers turn the text into a plan.

Talk to a lawyer