# Prior Consultation Workflow Reference

## Decision Workflow

1. Was a DPIA conducted under Art. 35? If NO, prior consultation is not triggered.
2. Did the DPIA identify high risks? If NO, not required.
3. Has the controller applied all available mitigation measures? If NO, implement measures first.
4. Does residual risk remain high after mitigation? If NO, proceed with processing.
5. If YES -- prior consultation is REQUIRED under Art. 36(1).

## Submission Preparation Workflow

1. Compile DPIA document ensuring all Art. 35(7) elements are complete.
2. Prepare residual risk summary explaining why risks remain high after mitigation.
3. Document all mitigation measures considered, implemented, and rejected with reasons.
4. Prepare Art. 36(3) information package.
5. DPO reviews and signs off.
6. Legal counsel reviews for accuracy.
7. Submit to competent supervisory authority.

## Timeline Tracking Workflow

1. Record submission date as Day 0.
2. Set alert for Week 7 (approaching 8-week deadline).
3. If extension notification received, update deadline to 14 weeks total.
4. If additional information requested, respond within the stated timeline.
5. If no response by deadline expiry, document and proceed.

## Outcome Implementation Workflow

1. Receive and log the written advice.
2. Categorise: approval, conditional approval, recommendations, or objection.
3. For conditional approval: implement conditions before processing.
4. For recommendations: implement and document evidence.
5. For objections: halt plans, revise design, consider resubmission.
6. Update DPIA with consultation outcome.
7. Update RoPA to reflect approved processing.