Article 28 › 1 LED — DIRECTIVE (EU) 2016/680 OF THE EUROPEAN PARLIAMENT AND OF…

Article 28 › 1

LED

DIRECTIVE (EU) 2016/680 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA · European Union

Member States shall provide for the controller or processor to consult the supervisory authority prior to processing which will form part of a new filing system to be created, where: (a) a data protection impact assessment as provided for in Article 27 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk; or (b) the type of processing, in particular, where using new technologies, mechanisms or procedures, involves a high risk to the rights and freedoms of data subjects.

National law under this provision

1 national measure recorded under this provision, in 1 form — sign in to view the analysis.

← 28 · All articles · 2 →

Source: EUR-Lex CELLAR · retrieved 2026-08-27