{
  "object_type": "gdpr_agent",
  "id": "agent:eu:gdpr:art-5",
  "system_id": "system:eu:gdpr",
  "schema_version": 1,
  "article": 5,
  "title": "Principles relating to processing of personal data",
  "kind": "business_obligation",
  "decision": "Art. 5 GDPR (Principles relating to processing of personal data) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.",
  "obligation": {
    "addressee": "Controllers and/or processors",
    "provision": "Art. 5 GDPR",
    "text": "Verbatim text: see source",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_5"
  },
  "risk": {
    "level": "critical",
    "fine_tier": {
      "provision": "Art. 83(5)",
      "max_eur": 20000000,
      "max_turnover_pct": 4
    },
    "basis": "Art. 83 GDPR"
  },
  "action": [
    "Document how each principle is met per processing activity",
    "Set retention periods",
    "Be able to demonstrate compliance (accountability)"
  ],
  "deadline": "not_in_register",
  "verification": {
    "source": "EUR-Lex, Regulation (EU) 2016/679",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_5",
    "read_at": "2026-10-15"
  },
  "sha256": "84ca5d798df512251f09ca72211e3b6872f9946117d464e784bb1e825edbdce8",
  "version": {
    "agent_version": "1.0.0",
    "risk_version": "1.0",
    "decision_version": "1.0",
    "system_version": "1.0.0",
    "change_score": 0
  },
  "knowledge_card": "https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:gdpr--art-5",
  "api": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent-system?article=5",
  "page": "https://legal.exploreworldai.com/gdpr-agent-system/art-5",
  "source": "Source: NovaCopilot",
  "access_class": "public",
  "access_view": "public"
}