{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-33",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:781c6b812d3a4915ecc294a1fe85be02f3ecc4eb6628100c12b902b85bfedcde",
    "jurisdiction": "eu"
  },
  "id": "gdpr-2016-679-33",
  "kind": "deterministic-legal-agent",
  "llm_used": false,
  "risk_class": "minimal-risk",
  "act": {
    "id": "gdpr-2016-679",
    "name": "GDPR",
    "celex": "32016R0679"
  },
  "article": "33",
  "title": "Anmälan av en personuppgiftsincident till tillsynsmyndigheten",
  "official_source": "https://eur-lex.europa.eu/legal-content/SV/TXT/HTML/?uri=CELEX%3A32016R0679#art_33",
  "checked_at": "2026-08-18",
  "inputs": [
    {
      "name": "breach",
      "kind": "boolean",
      "label": "En personuppgiftsincident har inträffat",
      "labelEn": "A personal data breach has occurred"
    },
    {
      "name": "risk_to_rights",
      "kind": "boolean",
      "label": "Incidenten kan medföra en risk för rättigheter och friheter",
      "labelEn": "The breach may result in a risk to rights and freedoms"
    },
    {
      "name": "hours_since_aware",
      "kind": "number",
      "label": "Timmar sedan incidenten upptäcktes",
      "labelEn": "Hours since becoming aware"
    }
  ],
  "outcomes": [
    {
      "id": "33-none",
      "when": "breach = false",
      "code": "no-breach",
      "obligation": "Anmälningsplikten aktualiseras inte.",
      "obligation_en": "The duty to notify is not triggered.",
      "refs": [
        "1"
      ]
    },
    {
      "id": "33-no-risk",
      "when": "risk_to_rights = false",
      "code": "documented-only",
      "obligation": "Är det osannolikt att incidenten medför en risk behöver den inte anmälas, men den ska dokumenteras enligt artikel 33.5.",
      "obligation_en": "Where the breach is unlikely to result in a risk it need not be notified, but it shall be documented under Article 33(5).",
      "refs": [
        "1",
        "5"
      ]
    },
    {
      "id": "33-late",
      "when": "hours_since_aware >= 72",
      "code": "late-notification",
      "obligation": "Anmälan ska ändå göras, med en motivering till förseningen enligt artikel 33.1.",
      "obligation_en": "The notification shall still be made, accompanied by the reasons for the delay under Article 33(1).",
      "refs": [
        "1"
      ]
    },
    {
      "id": "33-notify",
      "when": "risk_to_rights = true",
      "code": "notify",
      "obligation": "Anmälan ska göras utan onödigt dröjsmål och senast 72 timmar efter upptäckten, med innehållet i artikel 33.3.",
      "obligation_en": "The notification shall be made without undue delay and within 72 hours of becoming aware, with the content in Article 33(3).",
      "refs": [
        "1",
        "3"
      ]
    }
  ],
  "fallback": "abstain",
  "call": "https://legal.exploreworldai.com/api/public/v1/agents/gdpr-2016-679-33/run",
  "hashes": {
    "text": "sha256:3d81aab9ebfb940c7e3ae2311111bab63eab087eddc69f7c54574a7668aaad2f",
    "script": "sha256:d1ddc5d24e08ced070cd93b8cb2fbcf47f409c43f430f9aeaeeabf7fe452f1ae",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:c8a5d1bc506f5d6ceb2cef15b9826366bb41a194316b77160ca05bfb04ca5c51"
  },
  "citation": "32016R0679 art. 33, Anmälan av en personuppgiftsincident till tillsynsmyndigheten. ExploreWorld Legal, https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-33 (hämtad 2026-08-18, bevis sha256:5ce3ad09af292544, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "canonical": "https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-33",
  "hash": "sha256:781c6b812d3a4915ecc294a1fe85be02f3ecc4eb6628100c12b902b85bfedcde",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:781c6b812d3a4915ecc294a1fe85be02f3ecc4eb6628100c12b902b85bfedcde",
    "revalidate_after": "2026-08-30T11:04:25.793Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}