Article 36 › 5
GDPR
Notwithstanding paragraph 1, Member State law may require controllers to consult with, and obtain prior authorisation from, the supervisory authority in relation to processing by a controller for the performance of a task carried out by the controller in the public interest, including processing in relation to social protection and public health.
← 4 · All articles · 37 →
Source: EUR-Lex CELLAR · retrieved 2026-08-26