{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-36","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-36)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:ce0366","proof":"sha256:c497490ef6cb45a97e29666f237b2efa90da1cc7c1c8089073a6841a1b3cff36","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:gdpr:art-36","act":"gdpr-2016-679","article":"36","text_sha256":"fd2bff0884a0dab4ad116f9877a21c11ea6479665fcfe784c3cd4e478f529968","obligations":[],"agent":"agent:eu:gdpr","name":"NovaCopilot GDPR Agent, Article 36","title":{"en":"Prior consultation","sv":"Förhandssamråd","de":"Vorherige Konsultation"},"text":{"lang":"en","paragraphs":["1. The controller shall consult the supervisory authority prior to processing where a data protection impact assessment under Article 35 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk.","2. Where the supervisory authority is of the opinion that the intended processing referred to in paragraph 1 would infringe this Regulation, in particular where the controller has insufficiently identified or mitigated the risk, the supervisory authority shall, within period of up to eight weeks of …","3. When consulting the supervisory authority pursuant to paragraph 1, the controller shall provide the supervisory authority with:","(a)","where applicable, the respective responsibilities of the controller, joint controllers and processors involved in the processing, in particular for processing within a group of undertakings;","(b)","the purposes and means of the intended processing;","(c)","the measures and safeguards provided to protect the rights and freedoms of data subjects pursuant to this Regulation;","(d)","where applicable, the contact details of the data protection officer;","(e)","the data protection impact assessment provided for in Article 35; and","(f)"],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32016R0679","read_at":"2026-08-18"},"sha256":"2853fef738cbaae4a6085cf37268b4a8ab75ff85fb07954b1a1620461d0d7e9c","duties":[],"applies_to_role":{"status":"not_in_register","roles":[]},"applies_to_industry":{"status":"not_in_register","industries":[]},"cross_industry_chains":{"status":"not_in_register","chains":[]},"revenue_exposure":{"status":"verified","sanction_article":"83","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","tiers":[{"article":"83(4)","basis":"max","percent_worldwide_turnover":2,"fixed_eur":10000000,"rule":"higher","applies_to":"controller_processor_obligations"},{"article":"83(5)","basis":"max","percent_worldwide_turnover":4,"fixed_eur":20000000,"rule":"higher","applies_to":"principles_rights_transfers"}],"via":"article 83"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-36","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=gdpr","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=gdpr"},"llm_used":false,"hash":"sha256:c497490ef6cb45a97e29666f237b2efa90da1cc7c1c8089073a6841a1b3cff36","version":"legal-2026-11-02","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:c497490ef6cb45a97e29666f237b2efa90da1cc7c1c8089073a6841a1b3cff36","revalidate_after":"2026-11-03T00:00:14.240Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-36","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-02T23:00:14.492Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-36","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1495}}