# Article 36. Prior consultation

Source: https://conformitate.md/en/law-195-2024/article-36
Law version: 2026-10-15 · Official source: legis.md (https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro)
Notice: The Romanian and Russian texts are those published in Monitorul Oficial. This English text is an unofficial translation by conformitate.md and has no legal force. Not an official publication. The Law was published in Monitorul Oficial No. 367-369/2024, art. 574.

Chapter IV · Section 3

(1) The controller shall consult the Centre prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk.

(2) Where the Centre considers that the intended processing referred to in paragraph (1) would infringe this Law, in particular where the controller has not identified the risk or has not mitigated it to a sufficient extent, the Centre shall, no later than eight weeks after receipt of the request for consultation, provide written advice to the controller and, where applicable, to the processor, and may use any of its powers referred to in art. 60. That period may be extended by six weeks, taking into account the complexity of the intended processing. The Centre shall inform the controller and, where applicable, the processor of any such extension within one month of receipt of the request, stating the reasons for the delay. Those periods may be suspended until the Centre has obtained the information it has requested for the purposes of the consultation.

(3) When consulting the Centre pursuant to paragraph (1), the controller shall provide the Centre with:

a) where applicable, the respective responsibilities of the controller, joint controllers and processors involved in the processing activities, in particular for processing within a group of enterprises;

b) the purposes and means of the intended processing;

c) the measures and safeguards provided for to protect the rights and freedoms of data subjects pursuant to this Law;

d) where applicable, the contact details of the data protection officer;

e) the data protection impact assessment; and

f) any other information requested by the Centre.

(4) Draft normative acts containing provisions on the processing of personal data shall be submitted to the Centre for an opinion under the conditions of Law No. 100/2017 on Normative Acts.

Related topics [Data protection impact assessment](https://conformitate.md/en/law-195-2024/impact-assessment)

## How we can help with this

-   [GDPR Moldova compliance assessment →](https://conformitate.md/en/services/compliance-assessment)
    
    We assess online how your company processes personal data and give you a written report of what is missing under Law No. 195/2024, in order of priority.

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing