{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-25",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:c88ba36122c077fcfd71d66f1f38023e51ae4775c2f9cc6330efff2048e024ad",
    "jurisdiction": "eu"
  },
  "id": "gdpr-2016-679-25",
  "kind": "deterministic-legal-agent",
  "llm_used": false,
  "risk_class": "minimal-risk",
  "act": {
    "id": "gdpr-2016-679",
    "name": "GDPR",
    "celex": "32016R0679"
  },
  "article": "25",
  "title": "Inbyggt dataskydd och dataskydd som standard",
  "official_source": "https://eur-lex.europa.eu/legal-content/SV/TXT/HTML/?uri=CELEX%3A32016R0679#art_25",
  "checked_at": "2026-08-18",
  "inputs": [
    {
      "name": "measures_at_design",
      "kind": "boolean",
      "label": "Skyddsåtgärder är beslutade redan vid fastställandet av medlen",
      "labelEn": "Measures decided when the means are determined"
    },
    {
      "name": "default_minimised",
      "kind": "boolean",
      "label": "Standardinställningen begränsar uppgifterna",
      "labelEn": "The default setting limits the data"
    }
  ],
  "outcomes": [
    {
      "id": "25-gap",
      "when": "någon(measures_at_design = false, default_minimised = false)",
      "code": "gap",
      "obligation": "Åtgärder ska vidtas både när medlen fastställs och vid själva behandlingen, och standardinställningen ska vara den mest skyddande.",
      "obligation_en": "Measures shall be taken both when the means are determined and at the time of processing, and the default shall be the most protective one.",
      "refs": [
        "1",
        "2"
      ]
    },
    {
      "id": "25-ok",
      "when": "alla(measures_at_design = true, default_minimised = true)",
      "code": "met",
      "obligation": "Åtgärderna ska stå i proportion till risk, kostnad och teknikens ståndpunkt och ska kunna visas.",
      "obligation_en": "The measures shall be proportionate to risk, cost and the state of the art, and shall be demonstrable.",
      "refs": [
        "1",
        "2"
      ]
    }
  ],
  "fallback": "abstain",
  "call": "https://legal.exploreworldai.com/api/public/v1/agents/gdpr-2016-679-25/run",
  "hashes": {
    "text": "sha256:3b594f26b279260d71e04f5bdd1b7b745116aa737e4b8333df4081ea095785d7",
    "script": "sha256:82f343331f2cf99c355d7a970910c80f0ca7c5d6cd04f7aca3ccb4f14e1905e2",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:f94985aa108b3776c4394df0fb38e78019738ea7eb189edce54aaa9767875e29"
  },
  "citation": "32016R0679 art. 25, Inbyggt dataskydd och dataskydd som standard. ExploreWorld Legal, https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-25 (hämtad 2026-08-18, bevis sha256:e0281e3eb128d341, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-25",
  "hash": "sha256:c88ba36122c077fcfd71d66f1f38023e51ae4775c2f9cc6330efff2048e024ad",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:c88ba36122c077fcfd71d66f1f38023e51ae4775c2f9cc6330efff2048e024ad",
    "revalidate_after": "2026-08-30T06:27:25.376Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}