{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty:eu:gdpr-art-30-controller","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty:eu:gdpr-art-30-controller)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:ba7f8d","proof":"sha256:c39d4682007f053a3552483abe2cc0e7d91c9a5a23e7c6da27df31f4ef98d4dd","jurisdiction":"eu","lang":"en"},"brand_source":"Source: NovaCopilot","status":"ok","id":"duty:eu:gdpr-art-30-controller","schema_version":1,"domain":"gdpr","jurisdiction":"eu","act":"gdpr","provision":"30","obligation":"Keep records of processing activities.","responsible_role":{"legal_role":"controller","owner_function":"IT and security"},"deadline":{"value":"not_in_register","note":null,"recipient":"internal","applies_from":"2018-05-25"},"exceptions":[{"provision":"GDPR art. 2.2 c","condition":"Processing by a natural person in the course of a purely personal or household activity.","effect":"not_applicable","source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679"},{"provision":"GDPR art. 30.5","condition":"Fewer than 250 employees, unless the processing is likely to result in a risk, is not occasional, or includes special categories or criminal data.","effect":"not_applicable","source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679"}],"risk":{"level":"high","basis":"Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low","max_amount":"EUR 10 000 000","max_turnover_pct":2,"sanctions":[{"id":"sanction:eu:gdpr-art-83-4","authority":"Competent supervisory authority"},{"id":"sanction:eu:gdpr-art-58-2","authority":"Competent supervisory authority"}]},"evidence_chain":[{"step":1,"kind":"primary_source","ref":"GDPR: Regulation (EU) 2016/679","url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj"},{"step":2,"kind":"provision","ref":"gdpr 30"},{"step":3,"kind":"obligation","ref":"obligation:eu:gdpr-art-30-controller","method":"Paraphrased from the provision text"},{"step":4,"kind":"evidence_to_keep","ref":"Dated record or log entry"}],"source":{"title":"GDPR: Regulation (EU) 2016/679","url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj"},"recommended_action":{"do":["Keep a written, including electronic, record with the items in Art. 30(1): purposes, categories of data subjects and data, recipients, third-country transfers, retention periods and security measures.","Make the record available to the supervisory authority on request.","Check the exemption in Art. 30(5) for organisations with fewer than 250 employees; it does not apply where processing is not occasional, involves risk or special categories."],"status":"reviewed_action_kit"},"hash":"sha256:c39d4682007f053a3552483abe2cc0e7d91c9a5a23e7c6da27df31f4ef98d4dd","what_to_do":{"timing":{"kind":"ongoing","text":"Applies on an ongoing basis while the conditions in the provision are met."},"steps":["Keep a written, including electronic, record with the items in Art. 30(1): purposes, categories of data subjects and data, recipients, third-country transfers, retention periods and security measures.","Make the record available to the supervisory authority on request.","Check the exemption in Art. 30(5) for organisations with fewer than 250 employees; it does not apply where processing is not occasional, involves risk or special categories."],"steps_status":"reviewed_action_kit","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj"},"gaps":["statutory_deadline"],"links":{"obligation_graph":"https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:gdpr","provenance_graph":"https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:gdpr","action_graph":"https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:gdpr","self":"https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Agdpr-art-30-controller"},"read_at":"2026-08-31","source_label":"Source: NovaCopilot","version":"legal-2026-11-02","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:c39d4682007f053a3552483abe2cc0e7d91c9a5a23e7c6da27df31f4ef98d4dd","revalidate_after":"2026-11-02T17:42:35.593Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty:eu:gdpr-art-30-controller","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/duty-objects","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"freshness":{"freshness_class":"live","as_of":"2026-11-02T16:42:35.922Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Agdpr-art-30-controller","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1472}}