65 Prior consultation with the Commissioner

65  Prior consultation with the Commissioner

(1)     This section applies where a controller intends to create a filing system and process personal data forming part of it.

(2)     The controller must consult the Commissioner prior to the processing if a data protection impact assessment prepared under section 64 indicates that the processing of the data would result in a high risk to the rights and freedoms of individuals (in the absence of measures to mitigate the risk).

(3)     Where the controller is required to consult the Commissioner under subsection (2), the controller must give the Commissioner—

(a)     the data protection impact

Popular documents