The controller must consult the Agency before processing where a DPIA shows high risk in the absence of mitigating measures, supplying the responsibilities of the parties, the purposes and means, the safeguards, the DPO's contact details, the DPIA and any other information requested. The Agency gives written advice within eight weeks, extendable by six weeks for complex processing, and may use its powers under Article 65.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.