Chapter 4 – controller and processor, Section 3 – Data protection impact assessment and prior consultation Article 35 – Data protection impact assessment Article 36 – Prior consultation