Data protection impact assessment and prior consul