{
  "object_type": "gdpr_agent",
  "id": "agent:eu:gdpr:art-25",
  "system_id": "system:eu:gdpr",
  "schema_version": 1,
  "article": 25,
  "title": "Data protection by design and by default",
  "kind": "business_obligation",
  "decision": "Art. 25 GDPR (Data protection by design and by default) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.",
  "obligation": {
    "addressee": "Controllers and/or processors",
    "provision": "Art. 25 GDPR",
    "text": "Verbatim text: see source",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_25"
  },
  "risk": {
    "level": "medium",
    "fine_tier": {
      "provision": "Art. 83(4)",
      "max_eur": 10000000,
      "max_turnover_pct": 2
    },
    "basis": "Art. 83 GDPR"
  },
  "action": [
    "Apply privacy by design in new systems",
    "Set privacy-friendly defaults"
  ],
  "deadline": "not_in_register",
  "verification": {
    "source": "EUR-Lex, Regulation (EU) 2016/679",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_25",
    "read_at": "2026-10-15"
  },
  "sha256": "ae817c18f71a8b6300a87b3e3ff697d3cbc25725633ea53ad2ec3c337b73d5d8",
  "version": {
    "agent_version": "1.0.0",
    "risk_version": "1.0",
    "decision_version": "1.0",
    "system_version": "1.0.0",
    "change_score": 0
  },
  "knowledge_card": "https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-25",
  "api": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=25",
  "page": "https://legal.exploreworldai.com/gdpr-agent-system/art-25",
  "source": "Source: NovaCopilot",
  "access_class": "public",
  "access_view": "public"
}