Consultation of and provision of information to the DPO
Article 7
1. Controllers shall involve the DPO when planning and discussing an activity that involves the processing of personal data. The DPO shall be informed of any processing operation as well as of any substantial change in an existing processing operation. 2. The DPO shall be informed about draft internal notes and decisions of the GSC directly relating to the internal application of Regulation (EU) 2018/1725. 3. The DPO shall be informed of all contacts with external parties relating to the internal application of Regulation (EU) 2018/1725 and of any interaction with the EDPS, in particular where the EDPS is consulted or informed pursuant to Articles 40 and 41 of that Regulation. 4. The DPO shall be consulted on draft arrangements between joint controllers and on draft data protection contractual clauses or other legal acts where personal data is processed by a processor.