{
  "object_type": "agent_pack",
  "schema_version": 1,
  "id": "agent-pack:eu:eprivacy",
  "act": "eprivacy",
  "count": 5,
  "pack_hash": "1497f23fd9cbba01a8edca8d9f5e477fbc46b5de7993e7a68c59f041f3c8f1f3",
  "usage": "Use each card directly in an answer: applies, risk, do, deadline, authority, source. Follow next_questions for the user's likely follow-up. Missing facts are not_in_register. Not legal advice.",
  "cards": [
    {
      "id": "card:eu:article:eprivacy--art-4",
      "applies": [
        "service-provider: Take appropriate technical and organisational measures to safeguard the security of the service and notify personal data breaches to the competent national authority."
      ],
      "risk": "not_in_register",
      "do": [
        "Take appropriate technical and organisational measures to safeguard the security of the service and notify personal data breaches to the competent national authority."
      ],
      "deadline": "Initial notification within 24 hours of detection (Regulation (EU) No 611/2013)",
      "authority": [],
      "source": "https://eur-lex.europa.eu/eli/dir/2002/58/oj",
      "core_hash": "02fcd5c9b246b926352e7cc6b12f1dbc0de6936225b26558897cafb11d47a79a",
      "next": [
        "obligation:eu:eprivacy-art-4-service-provider",
        "eu:62018cj0511",
        "eu:c-623-17-62017cj0623",
        "card:eu:article:eprivacy--art-13",
        "card:eu:article:eprivacy--art-5"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-13"
        },
        {
          "q": "What does Article 5 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-5"
        },
        {
          "q": "What does Article 6 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-6"
        },
        {
          "q": "What does Article 9 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-9"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:eprivacy--art-5",
      "applies": [
        "website-operator: Obtain prior informed consent before storing or accessing information on a user's terminal equipment (cookies and similar), unless strictly necessary for the service requested."
      ],
      "risk": "not_in_register",
      "do": [
        "Obtain prior informed consent before storing or accessing information on a user's terminal equipment (cookies and similar), unless strictly necessary for the service requested."
      ],
      "deadline": "not_in_register",
      "authority": [],
      "source": "https://eur-lex.europa.eu/eli/dir/2002/58/oj",
      "core_hash": "a032f025f67e225e973735bdc9228449b70ef4337393b9b69db5ff4989b4a403",
      "next": [
        "obligation:eu:eprivacy-art-5-website-operator",
        "eu:62018cj0511",
        "eu:c-119-12",
        "eu:c-140-20",
        "eu:c-178-22"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-13"
        },
        {
          "q": "What does Article 4 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-4"
        },
        {
          "q": "What does Article 6 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-6"
        },
        {
          "q": "What does Article 9 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-9"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:eprivacy--art-6",
      "applies": [
        "service-provider: Erase or anonymise traffic data when no longer needed for transmitting the communication, unless consent or billing purposes apply."
      ],
      "risk": "not_in_register",
      "do": [
        "Erase or anonymise traffic data when no longer needed for transmitting the communication, unless consent or billing purposes apply."
      ],
      "deadline": "not_in_register",
      "authority": [],
      "source": "https://eur-lex.europa.eu/eli/dir/2002/58/oj",
      "core_hash": "407c36cc76705ef069b73a83d45541dc63e3d011c05116e4e5797fceaa47c95c",
      "next": [
        "obligation:eu:eprivacy-art-6-service-provider",
        "eu:62018cj0511",
        "eu:62020cj0339",
        "eu:c-119-12",
        "eu:c-140-20"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-13"
        },
        {
          "q": "What does Article 4 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-4"
        },
        {
          "q": "What does Article 5 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-5"
        },
        {
          "q": "What does Article 9 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-9"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:eprivacy--art-9",
      "applies": [
        "service-provider: Process location data other than traffic data only when anonymised or with the user's consent, after informing the user."
      ],
      "risk": "not_in_register",
      "do": [
        "Process location data other than traffic data only when anonymised or with the user's consent, after informing the user."
      ],
      "deadline": "not_in_register",
      "authority": [],
      "source": "https://eur-lex.europa.eu/eli/dir/2002/58/oj",
      "core_hash": "c7a1cb970540abfa2a826427dfde4201a5391ba78e90e7e112c39fcb7b338064",
      "next": [
        "obligation:eu:eprivacy-art-9-service-provider",
        "eu:c-178-22",
        "eu:c-746-18",
        "card:eu:article:eprivacy--art-13",
        "card:eu:article:eprivacy--art-4"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-13"
        },
        {
          "q": "What does Article 4 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-4"
        },
        {
          "q": "What does Article 5 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-5"
        },
        {
          "q": "What does Article 6 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-6"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:eprivacy--art-13",
      "applies": [
        "sender: Send electronic direct marketing only with prior consent, except to existing customers for similar products with a clear and free opt-out in every message; never conceal the sender's identity."
      ],
      "risk": "not_in_register",
      "do": [
        "Send electronic direct marketing only with prior consent, except to existing customers for similar products with a clear and free opt-out in every message; never conceal the sender's identity."
      ],
      "deadline": "not_in_register",
      "authority": [],
      "source": "https://eur-lex.europa.eu/eli/dir/2002/58/oj",
      "core_hash": "61f2574c9912d7a465a29a7a4e2e16c4a766cc9d434cb708edf7babf8a0db965",
      "next": [
        "obligation:eu:eprivacy-art-13-sender",
        "eu:c-102-20",
        "eu:c-654-23-62023cj0654",
        "card:eu:article:eprivacy--art-4",
        "card:eu:article:eprivacy--art-5"
      ],
      "next_questions": [
        {
          "q": "What does Article 4 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-4"
        },
        {
          "q": "What does Article 5 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-5"
        },
        {
          "q": "What does Article 6 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-6"
        },
        {
          "q": "What does Article 9 EPRIVACY require?",
          "card": "card:eu:article:eprivacy--art-9"
        }
      ],
      "attribution": "Source: NovaCopilot"
    }
  ],
  "index": "/api/public/v1/agent-pack",
  "concept": "/api/public/v1/agent",
  "attribution": "Source: NovaCopilot",
  "access_class": "decision",
  "access_view": "public"
}