{
  "object_type": "gdpr_agent",
  "id": "agent:eu:gdpr:art-24",
  "system_id": "system:eu:gdpr",
  "schema_version": 1,
  "article": 24,
  "title": "Responsibility of the controller",
  "kind": "business_obligation",
  "decision": "Art. 24 GDPR (Responsibility of the controller) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.",
  "obligation": {
    "addressee": "Controllers and/or processors",
    "provision": "Art. 24 GDPR",
    "text": "Verbatim text: see source",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_24"
  },
  "risk": {
    "level": "not_in_register",
    "fine_tier": "not_in_register",
    "basis": "Art. 83 GDPR"
  },
  "action": [
    "Adopt appropriate technical and organisational measures",
    "Adopt data protection policies"
  ],
  "deadline": "not_in_register",
  "verification": {
    "source": "EUR-Lex, Regulation (EU) 2016/679",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_24",
    "read_at": "2026-10-15"
  },
  "sha256": "08dd8c801b0dfbdb02a90a9b8e386d6b951ba0776855f10586764fa44cb7cdef",
  "version": {
    "agent_version": "1.0.0",
    "risk_version": "1.0",
    "decision_version": "1.0",
    "system_version": "1.0.0",
    "change_score": 0
  },
  "knowledge_card": "https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-24",
  "api": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=24",
  "page": "https://legal.exploreworldai.com/gdpr-agent-system/art-24",
  "source": "Source: NovaCopilot",
  "access_class": "public",
  "access_view": "public"
}