Article 36 - Prior consultation

Article 36 of the GDPR obliges a data controller to seek prior consultation with the relevant supervisory authority when a proposed processing operation is likely to result in a high risk to the rights and freedoms of individuals, especially when using new or innovative technologies. The controller must provide a detailed description of the processing, the intended safeguards and the risk assessment, and must await the authority's advice before proceeding.