Consult the competent supervisory authority before launch: What must happen first?
Unmitigated high residual risk requires prior consultation with the competent supervisory authority.
The question
Under the GDPR in the EEA, a customer-service AI DPIA concludes that high residual risk to individuals remains and cannot be sufficiently mitigated by the proposed safeguards. The service owner wants to launch while the DPO reviews the file. What must happen first?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Record the risk and obtain internal approval.Documentation and internal approval support accountability but do not replace consultation with the supervisory authority.
- Obtain DPO sign-off and launch under enhanced safeguards.DPO review and enhanced safeguards do not displace prior authority consultation where the stated Article 36 conditions remain present.
- Continue with post-launch monitoring.Post-launch monitoring cannot replace the required step before processing when Article 36 applies.
- Consult the competent supervisory authority before launch. ✓GDPR Article 36 requires prior consultation when high residual risk cannot be sufficiently mitigated.
The trap
Look for both high residual risk and inability to sufficiently mitigate it before selecting Article 36 consultation. How to remember it
Unmitigated high residual risk requires prior consultation with the competent supervisory authority.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Complete a GDPR DPIA before processing: What must happen before processing begins? →
- Require a reviewer with authority: What control is needed? →
- Potential biometric special-category processing: What does this evidence support? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.