{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/decision-chain?id=decision_chain%3Aeu%3Agdpr-art-36-controller","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/decision-chain?id=decision_chain%3Aeu%3Agdpr-art-36-controller)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:se:73931a","proof":"sha256:3ed3b68963da5c4785fd2739230efeb856584938466d2410f463ff0336e733fa","jurisdiction":"se","lang":"sv"},"brand_source":"Source: NovaCopilot","object_type":"decision_chain","schema_version":"1","id":"decision_chain:eu:gdpr-art-36-controller","question":"Måste controller agera enligt Regulation (EU) 2016/679 (GDPR)?","answer":"Consult the supervisory authority before processing where a data protection impact assessment indicates high risk in the absence of mitigating measures.","risk_level":"high","steps":["decision","obligation","action","risk","sanction","authority","consequence"],"steps_present":7,"breaks_at":null,"chain_hash":"0161848e873ad8d23475c1407a30f3ae22e994f1abab377bd7f7956e0e0cde9c","chain_hash_rule":"SHA-256 över rader \"steg|id|sha256\" i ordningen decision, obligation, action, risk, sanction, authority, consequence; saknat led skrivs \"steg|not_in_register|\"","risk_basis":{"level":"high","rule":"high: administrative fine, civil or criminal penalty in register; medium: damages or corrective order; low: no sanction in register","sanction_types":["administrative_fine","corrective_order"],"max_amount":"EUR 10 000 000","max_turnover_pct":2,"deadline":{"note":"Before processing. The authority gives written advice within eight weeks, extendable by six weeks (Art. 36(2))."},"decisions_on_provision":"not_in_register","enforcement_decisions":3},"outcome":"not_in_register","see_also":{"obligation_answer":"not_in_register","consequence":"https://legal.exploreworldai.com/api/public/v1/obj/consequence/eu%3Agdpr-art-36-controller","action":"https://legal.exploreworldai.com/api/public/v1/obj/action/eu%3Agdpr-art-36-controller"},"partner_access":"Ledens ID:n och hashar (chain) och efterfrågan visas med partnernyckel.","hash":"sha256:3ed3b68963da5c4785fd2739230efeb856584938466d2410f463ff0336e733fa","version":"legal-2026-11-02","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T08:29:46","content_hash":"sha256:3ed3b68963da5c4785fd2739230efeb856584938466d2410f463ff0336e733fa","revalidate_after":"2026-11-02T10:04:14.228Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/decision-chain?id=decision_chain%3Aeu%3Agdpr-art-36-controller","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","withheld":{"chain":7},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"relationship","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-02T09:04:14.546Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/decision-chain?id=decision_chain%3Aeu%3Agdpr-art-36-controller","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1128}}