{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-28",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:8c4c11e486d701582d37f96026467b8bf97a993e650fa2e174ad72ce2504a1bd",
    "jurisdiction": "eu"
  },
  "id": "gdpr-2016-679-28",
  "kind": "deterministic-legal-agent",
  "llm_used": false,
  "risk_class": "minimal-risk",
  "act": {
    "id": "gdpr-2016-679",
    "name": "GDPR",
    "celex": "32016R0679"
  },
  "article": "28",
  "title": "Personuppgiftsbiträden",
  "official_source": "https://eur-lex.europa.eu/legal-content/SV/TXT/HTML/?uri=CELEX%3A32016R0679#art_28",
  "checked_at": "2026-08-18",
  "inputs": [
    {
      "name": "processor_used",
      "kind": "boolean",
      "label": "Ett personuppgiftsbiträde anlitas",
      "labelEn": "A processor is engaged"
    },
    {
      "name": "written_contract",
      "kind": "boolean",
      "label": "Skriftligt avtal finns",
      "labelEn": "A written contract is in place"
    },
    {
      "name": "subprocessor_authorised",
      "kind": "boolean",
      "label": "Underbiträden är godkända",
      "labelEn": "Sub-processors are authorised"
    }
  ],
  "outcomes": [
    {
      "id": "28-none",
      "when": "processor_used = false",
      "code": "outside",
      "obligation": "Inget biträde anlitas.",
      "obligation_en": "No processor is engaged.",
      "refs": [
        "1"
      ]
    },
    {
      "id": "28-no-contract",
      "when": "inte(written_contract = true)",
      "code": "contract-missing",
      "obligation": "Behandlingen ska regleras i ett avtal med det innehåll som anges i artikel 28.3 a till h.",
      "obligation_en": "The processing shall be governed by a contract with the content set out in Article 28(3)(a) to (h).",
      "refs": [
        "3"
      ]
    },
    {
      "id": "28-subprocessor",
      "when": "subprocessor_authorised = false",
      "code": "subprocessor-unauthorised",
      "obligation": "Ett biträde får inte anlita ett underbiträde utan skriftligt förhandsgodkännande, särskilt eller allmänt, från den ansvarige.",
      "obligation_en": "A processor shall not engage a sub-processor without prior specific or general written authorisation from the controller.",
      "refs": [
        "2"
      ]
    },
    {
      "id": "28-ok",
      "when": "written_contract = true",
      "code": "contract-in-place",
      "obligation": "Avtalet ska ålägga biträdet tystnadsplikt, säkerhet enligt artikel 32, bistånd och radering eller återlämnande vid uppdragets slut.",
      "obligation_en": "The contract shall bind the processor to confidentiality, security under Article 32, assistance and deletion or return at the end of the engagement.",
      "refs": [
        "3"
      ]
    }
  ],
  "fallback": "abstain",
  "call": "https://legal.exploreworldai.com/api/public/v1/agents/gdpr-2016-679-28/run",
  "hashes": {
    "text": "sha256:f3b150d4ae18ba16addbacecc27a0f4ee99efc825c66a68758e8365bd13641c4",
    "script": "sha256:d05185dedda73293bd610e5f944a8b82e1405a66037d2f65a02473c7c92c3af6",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:61c998efdb1ba5303535f26a1cb4ed01e511d7d65ea118c492ab37bd7787f64c"
  },
  "citation": "32016R0679 art. 28, Personuppgiftsbiträden. ExploreWorld Legal, https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-28 (hämtad 2026-08-18, bevis sha256:5887cd2aac195e33, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-28",
  "hash": "sha256:8c4c11e486d701582d37f96026467b8bf97a993e650fa2e174ad72ce2504a1bd",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:8c4c11e486d701582d37f96026467b8bf97a993e650fa2e174ad72ce2504a1bd",
    "revalidate_after": "2026-08-30T12:08:15.327Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}