{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:shared:5e1b2c","proof":"sha256:e6969597e112b786ceafd37400401dda4e9e60da67b4721d51072c482e26e7e6","jurisdiction":"shared","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","surface":"agent-answer","publisher":"NovaCopilot","access_class":"public","id":"gdpr-breach","question":"We had a data breach. Whom must we notify under GDPR and how fast?","framework":"GDPR","articles":[{"ref":"gdpr:33","title":"Notification of a personal data breach to the supervisory authority","status":"verified"},{"ref":"gdpr:34","title":"Communication of a personal data breach to the data subject","status":"verified"}],"depth":"brief","answer":{"type":"source_excerpt","ref":"GDPR Article 33","text":"Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay."},"sources":{"official":["https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32016R0679"],"verified_at":["2026-10-30","2026-10-30"]},"omitted":{},"next_depth":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach?depth=standard","source":"Source: NovaCopilot","tokens":219,"core_sha256":"607b5441d0969f1cdf5b7b8e61ebaf3fa093a50c668873661467566fdc7a6e41","license_scope":"public_index","rules_url":"https://legal.exploreworldai.com/novacopilot/datakalla","return_links":{"article_basis":[{"ref":"gdpr:33","url":"https://legal.exploreworldai.com/api/public/v1/article-basis?act=gdpr&article=33"},{"ref":"gdpr:34","url":"https://legal.exploreworldai.com/api/public/v1/article-basis?act=gdpr&article=34"}],"feeds":{"agent_answers":"https://legal.exploreworldai.com/feed/agentsvar.xml","praxis_graph":"https://legal.exploreworldai.com/feed/praxisgraf.xml"},"formats":{"html":"https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-breach","json":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach","brief":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach?depth=brief"},"canonical":"https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-breach","cite_as":"NovaCopilot, \"We had a data breach. Whom must we notify under GDPR and how fast?\", https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-breach","publisher":"NovaCopilot","source":"Source: NovaCopilot","refresh_note":"Re-fetch the canonical address; copies do not receive later verified changes."},"hash":"sha256:e6969597e112b786ceafd37400401dda4e9e60da67b4721d51072c482e26e7e6","version":"legal-2026-11-03","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T18:20:21","content_hash":"sha256:e6969597e112b786ceafd37400401dda4e9e60da67b4721d51072c482e26e7e6","revalidate_after":"2026-11-04T00:25:19.126Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T23:25:19.126Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-breach?depth=brief","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1244}}