# Prior consultation 36(1) — GDPR — provision context

> Focused context for a single provision (36(1)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-36#par-1
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Prior consultation** (GDPR, full article: https://overview.legal/laws/gdpr/art-36).

## Provision text

### 36(1)

The controller shall consult the supervisory authority prior to processing where a data protection impact assessment under Article 35 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk.


## Topics on this provision

- **Privacy Impact Assessment** — https://overview.legal/topics/privacy-impact-assessment
  Data protection impact assessments (DPIA)
- **Prior Consultation** — https://overview.legal/topics/prior-consultation
  Consultation with supervisory authority before processing
- **DPIA** — https://overview.legal/topics/dpia
  Data Protection Impact Assessment - systematic evaluation of processing risks
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **Judgment of the Court (First Chamber) of 4 October 2024.#Agentsia po vpisvaniyata v OL.#Request for a preliminary ruling from the Varhoven administrativen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Publication in the commercial register of a company’s constitutive instrument containing personal data – Directive (EU) 2017/1132 – Non-compulsory personal data – Lack of consent of the data subjec** (case-law) — https://overview.legal/posts/132161
- **Judgment of the Court (First Chamber) of 4 October 2024.#Agentsia po vpisvaniyata v OL.#Request for a preliminary ruling from the Varhoven administrativen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Publication in the commercial register of a company’s constitutive instrument containing personal data – Directive (EU) 2017/1132 – Non-compulsory personal data – Lack of consent of the data subjec** ¶14 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132161
- **Guidelines 10/2020 on restrictions under Article 23 GDPR** (guidance) — https://overview.legal/posts/38062
- **Guidelines 01/2023 on Article 37 Law Enforcement Directive** (guidance) — https://overview.legal/posts/125738
- **Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR)** (guidance) — https://overview.legal/posts/125750
- **EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro** (guidance) — https://overview.legal/posts/125823
- **If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation** (literature) — https://overview.legal/posts/53843

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-36#par-1 · 2026-08-22