{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-25",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:be9890da2d6bdf4c7417c2d8e11312182dcb4c5a75a9c651012eaa703ce81ef4",
    "jurisdiction": "eu"
  },
  "id": "gdpr-2016-679-25",
  "script": {
    "kind": "operative",
    "fields": [
      {
        "name": "measures_at_design",
        "kind": "boolean",
        "label": "Skyddsåtgärder är beslutade redan vid fastställandet av medlen",
        "labelEn": "Measures decided when the means are determined"
      },
      {
        "name": "default_minimised",
        "kind": "boolean",
        "label": "Standardinställningen begränsar uppgifterna",
        "labelEn": "The default setting limits the data"
      }
    ],
    "rules": [
      {
        "id": "25-gap",
        "when": {
          "op": "any",
          "of": [
            {
              "op": "equals",
              "field": "measures_at_design",
              "value": false
            },
            {
              "op": "equals",
              "field": "default_minimised",
              "value": false
            }
          ]
        },
        "outcome": {
          "code": "gap",
          "title": "Inbyggt dataskydd är inte uppfyllt",
          "titleEn": "Data protection by design is not met",
          "obligation": "Åtgärder ska vidtas både när medlen fastställs och vid själva behandlingen, och standardinställningen ska vara den mest skyddande.",
          "obligationEn": "Measures shall be taken both when the means are determined and at the time of processing, and the default shall be the most protective one.",
          "refs": [
            "1",
            "2"
          ]
        }
      },
      {
        "id": "25-ok",
        "when": {
          "op": "all",
          "of": [
            {
              "op": "equals",
              "field": "measures_at_design",
              "value": true
            },
            {
              "op": "equals",
              "field": "default_minimised",
              "value": true
            }
          ]
        },
        "outcome": {
          "code": "met",
          "title": "Kraven är angivna som uppfyllda",
          "titleEn": "The requirements are stated as met",
          "obligation": "Åtgärderna ska stå i proportion till risk, kostnad och teknikens ståndpunkt och ska kunna visas.",
          "obligationEn": "The measures shall be proportionate to risk, cost and the state of the art, and shall be demonstrable.",
          "refs": [
            "1",
            "2"
          ]
        }
      }
    ],
    "fallback": {
      "code": "abstain",
      "title": "Artikeln ger inget utfall på den indata som lämnats",
      "titleEn": "The article yields no outcome for the facts supplied",
      "obligation": "Ingen av artikelns rekvisit är uppfyllda med de uppgifter som lämnats. Lämna fler uppgifter eller läs artikeltexten i sin helhet.",
      "obligationEn": "None of the article's conditions are met with the facts supplied. Supply more facts or read the article in full.",
      "refs": []
    }
  },
  "hash": "sha256:be9890da2d6bdf4c7417c2d8e11312182dcb4c5a75a9c651012eaa703ce81ef4",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:be9890da2d6bdf4c7417c2d8e11312182dcb4c5a75a9c651012eaa703ce81ef4",
    "revalidate_after": "2026-08-30T07:06:49.812Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-25",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "usageInfo": "https://legal.exploreworldai.com/citering"
}