# AEPD checklist: is a DPIA complete, and must you consult the authority?

- Type: Tools
- Source: AEPD
- Date: 2026-11-11
- Original: https://www.aepd.es/es/documento/checklist-dpia-submission-prior-consultation.docx
- Canonical: https://overview.legal/posts/623992
- Topics: DPIA, Prior Consultation, Supervision, Controllers, Supervisory Authorities

## Summary

A checklist of the Spanish DPA in English to test whether a DPIA is formally adequate and whether the residual risk requires prior consultation of the supervisory authority under Article 36.

## Full text

A checklist of the Spanish DPA in English to test whether a DPIA is formally adequate and whether the residual risk requires prior consultation of the supervisory authority under Article 36.

When to use it: A DPIA is finished and you must decide whether the residual risk is high enough to consult.
Provisions: GDPR Art. 35, GDPR Art. 36.
Published by AEPD (supervisory authority), for Spain.
For: controllers, DPOs and privacy officers.
Free; available in English.

Een Engelstalige checklist van de Spaanse toezichthouder om te toetsen of een DPIA formeel volledig is en of het restrisico vraagt om voorafgaande raadpleging van de toezichthouder onder artikel 36.

Wanneer gebruiken: Een DPIA is af en je moet beslissen of het restrisico zo hoog is dat je de toezichthouder raadpleegt.

---
Generated by overview.legal · https://overview.legal/posts/623992 · 2026-11-14