{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-40","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-40)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:eu:ea5c38","proof":"sha256:2bebfeac26c569a85755523b1689c14d78fbdbb87782f78963a8d05f8e025ddb","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:gdpr:art-40","act":"gdpr-2016-679","article":"40","text_sha256":"aeec992b4869932e4788dd3c0a4589cfbb5df570daaec323913a9c40bc6f23bf","obligations":[],"agent":"agent:eu:gdpr","name":"NovaCopilot GDPR Agent, Article 40","title":{"en":"Codes of conduct","sv":"Uppförandekoder","de":"Verhaltensregeln"},"text":{"lang":"en","paragraphs":["1. The Member States, the supervisory authorities, the Board and the Commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this Regulation, taking account of the specific features of the various processing sectors and the specific needs of micro, small and medium-sized enterprises.","2. Associations and other bodies representing categories of controllers or processors may prepare codes of conduct, or amend or extend such codes, for the purpose of specifying the application of this Regulation, such as with regard to:","(a)","fair and transparent processing;","(b)","the legitimate interests pursued by controllers in specific contexts;","(c)","the collection of personal data;","(d)","the pseudonymisation of personal data;","(e)","the information provided to the public and to data subjects;","(f)","the exercise of the rights of data subjects;"],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32016R0679","read_at":"2026-08-18"},"sha256":"8c4557e7f04fe6841f81f543a90d68043e186c7363fbe054a008e7687110043e","duties":[],"applies_to_role":{"status":"not_in_register","roles":[]},"applies_to_industry":{"status":"not_in_register","industries":[]},"cross_industry_chains":{"status":"not_in_register","chains":[]},"revenue_exposure":{"status":"verified","sanction_article":"83","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","tiers":[{"article":"83(4)","basis":"max","percent_worldwide_turnover":2,"fixed_eur":10000000,"rule":"higher","applies_to":"controller_processor_obligations"},{"article":"83(5)","basis":"max","percent_worldwide_turnover":4,"fixed_eur":20000000,"rule":"higher","applies_to":"principles_rights_transfers"}],"via":"article 83"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-40","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=gdpr","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=gdpr"},"llm_used":false,"hash":"sha256:2bebfeac26c569a85755523b1689c14d78fbdbb87782f78963a8d05f8e025ddb","version":"legal-2026-11-03","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T07:33:32","content_hash":"sha256:2bebfeac26c569a85755523b1689c14d78fbdbb87782f78963a8d05f8e025ddb","revalidate_after":"2026-11-03T08:42:10.530Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-40","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T07:42:10.577Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-40","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1320}}