Request prior consultation according to The Criminal Data Act
A prior consultation should be requested with us when the impact assessment shows that:
- there is a particular risk of breach of the data subject's privacy
- the type of processing involves a particular risk of intrusion.
When assessing whether the type of processing entails such a risk to the privacy of data subjects that prior consultation should take place, new technologies, practices or procedures should be particularly considered.
A request for prior consultation shall be made well in advance before the processing begins or significant changes are made.
Do an impact assessment first
If you are planning a personal data processing that poses a high risk to the rights and freedoms of individuals, you must first do an impact assessment. This will guide you whether you should request prior consultation with us.
EDPB's Guidelines on Data Protection Impact Assessment (DPIA)
Do the following:
In order to request a prior consultation, the impact assessment must be completed and documented.
- Attach the impact assessment with your request
- Provide details of the controller and contact person.
Send to:
Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Send your request by physical letter, not by e-mail. If you consider it necessary, you can send your request by registered letter.
Processing time at IMY
Within six weeks of receiving the request for prior consultation, we will provide our assessment of the planned personal data processing. If we have specific reasons, the time can be extended by one month. We will inform you of this and the reasons for the extension within one month of receiving the request for prior consultation.