{
  "object_type": "gdpr_agent",
  "id": "agent:eu:gdpr:art-38",
  "system_id": "system:eu:gdpr",
  "schema_version": 1,
  "article": 38,
  "title": "Position of the data protection officer",
  "kind": "business_obligation",
  "decision": "Art. 38 GDPR (Position of the data protection officer) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.",
  "obligation": {
    "addressee": "Controllers and/or processors",
    "provision": "Art. 38 GDPR",
    "text": "Verbatim text: see source",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_38"
  },
  "risk": {
    "level": "medium",
    "fine_tier": {
      "provision": "Art. 83(4)",
      "max_eur": 10000000,
      "max_turnover_pct": 2
    },
    "basis": "Art. 83 GDPR"
  },
  "action": "not_in_register",
  "deadline": "not_in_register",
  "verification": {
    "source": "EUR-Lex, Regulation (EU) 2016/679",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_38",
    "read_at": "2026-10-15"
  },
  "sha256": "22f6e6f43206bf4340fc4940c7b209c2df8cbccb79309810acab848234d9185c",
  "version": {
    "agent_version": "1.0.0",
    "risk_version": "1.0",
    "decision_version": "1.0",
    "system_version": "1.0.0",
    "change_score": 0
  },
  "knowledge_card": "https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-38",
  "api": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=38",
  "page": "https://legal.exploreworldai.com/gdpr-agent-system/art-38",
  "source": "Source: NovaCopilot",
  "access_class": "public",
  "access_view": "public"
}