{"object_type":"gdpr_agent","id":"agent:eu:gdpr:art-33","system_id":"system:eu:gdpr","schema_version":1,"article":33,"title":"Notification of a personal data breach to the supervisory authority","kind":"business_obligation","decision":"Art. 33 GDPR (Notification of a personal data breach to the supervisory authority) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.","obligation":{"addressee":"Controllers and/or processors","provision":"Art. 33 GDPR","text":"Verbatim text: see source","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_33"},"risk":{"level":"high","fine_tier":{"provision":"Art. 83(4)","max_eur":10000000,"max_turnover_pct":2},"basis":"Art. 83 GDPR"},"action":["Log every breach","Notify the supervisory authority within 72 hours unless unlikely to result in a risk"],"deadline":{"deadline":"Without undue delay and, where feasible, not later than 72 hours after having become aware of the breach.","provision":"Art. 33(1)"},"verification":{"source":"EUR-Lex, Regulation (EU) 2016/679","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_33","read_at":"2026-10-15"},"sha256":"5d00e6b440fceb9330dab8df8ac3a4ceb3f28321b71b55773c5668a23262816c","version":{"agent_version":"1.0.0","risk_version":"1.0","decision_version":"1.0","system_version":"1.0.0","change_score":0},"knowledge_card":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-33","api":"https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=33","page":"https://legal.exploreworldai.com/gdpr-agent-system/art-33","source":"Source: NovaCopilot","access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-10-29T16:51:59.162Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=33","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":486}}