{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-18",
    "fingerprint": "ewai:eu:af7c6b",
    "proof": "sha256:f8176b013083465f21f64425f78981fbd77f59c0d5f0aba0adcbb6ab276e551a",
    "jurisdiction": "eu",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "agent_id": "agent:eu:gdpr:art-6",
  "schema_version": "1",
  "graph_version": "2026-10-10.2",
  "as_of": "2026-10-18",
  "article": {
    "key": "art-6",
    "number": "6",
    "title": {
      "sv": "Laglig behandling",
      "en": "Lawfulness of processing",
      "no": "Lovlig behandling",
      "de": "Rechtmäßigkeit der Verarbeitung"
    },
    "fine_tier": "83-5",
    "node": "article:eu:gdpr:art-6"
  },
  "intelligence_version": "2026-10-10.2+c0eaa95499a4",
  "input": {
    "industry": "general",
    "role": "controller",
    "country": "",
    "size": "not_reported",
    "employees": null,
    "turnover_eur": null,
    "controls": []
  },
  "requirements": [
    {
      "id": "requirement:eu:gdpr:art-6-1-a",
      "provision": "Art. 6(1)(a)",
      "label": {
        "sv": "Samtycke",
        "en": "Consent",
        "no": "Samtykke",
        "de": "Einwilligung"
      }
    },
    {
      "id": "requirement:eu:gdpr:art-6-1-b",
      "provision": "Art. 6(1)(b)",
      "label": {
        "sv": "Avtal",
        "en": "Contract",
        "no": "Avtale",
        "de": "Vertrag"
      }
    },
    {
      "id": "requirement:eu:gdpr:art-6-1-c",
      "provision": "Art. 6(1)(c)",
      "label": {
        "sv": "Rättslig förpliktelse",
        "en": "Legal obligation",
        "no": "Rettslig forpliktelse",
        "de": "Rechtliche Verpflichtung"
      }
    },
    {
      "id": "requirement:eu:gdpr:art-6-1-d",
      "provision": "Art. 6(1)(d)",
      "label": {
        "sv": "Grundläggande intressen",
        "en": "Vital interests",
        "no": "Vitale interesser",
        "de": "Lebenswichtige Interessen"
      }
    },
    {
      "id": "requirement:eu:gdpr:art-6-1-e",
      "provision": "Art. 6(1)(e)",
      "label": {
        "sv": "Allmänt intresse eller myndighetsutövning",
        "en": "Public task",
        "no": "Allmenn interesse eller offentlig myndighet",
        "de": "Öffentliche Aufgabe"
      }
    },
    {
      "id": "requirement:eu:gdpr:art-6-1-f",
      "provision": "Art. 6(1)(f)",
      "label": {
        "sv": "Berättigat intresse",
        "en": "Legitimate interests",
        "no": "Berettiget interesse",
        "de": "Berechtigte Interessen"
      }
    }
  ],
  "sanction": {
    "provision": "Art. 83(5)",
    "cap_fixed_eur": 20000000,
    "cap_turnover_pct": 4,
    "cap_for_entity_eur": "turnover_required"
  },
  "counts": {
    "requirements": 6,
    "controls": 3,
    "evidence": 3,
    "authority_decisions": 275,
    "industry_decisions": 275,
    "scenarios": 6,
    "relationships": 1380,
    "fine": 155,
    "order_or_reprimand": 120
  },
  "scenarios": [
    {
      "key": "ai-training-customer-data",
      "question": {
        "sv": "Får vi använda kunddata för att träna en AI-modell?",
        "en": "Can we use customer data to train an AI model?",
        "no": "Kan vi bruke kundedata til å trene en AI-modell?",
        "de": "Dürfen wir Kundendaten zum Training eines KI-Modells nutzen?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=ai-training-customer-data"
    },
    {
      "key": "email-marketing",
      "question": {
        "sv": "Får vi skicka marknadsföring via e-post till kunder?",
        "en": "Can we send marketing emails to customers?",
        "no": "Kan vi sende markedsføring på e-post til kunder?",
        "de": "Dürfen wir Kunden Werbe-E-Mails senden?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=email-marketing"
    },
    {
      "key": "employee-monitoring",
      "question": {
        "sv": "Får vi övervaka anställdas system och e-post?",
        "en": "Can we monitor employees' systems and email?",
        "no": "Kan vi overvåke ansattes systemer og e-post?",
        "de": "Dürfen wir Systeme und E-Mails von Mitarbeitern überwachen?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=employee-monitoring"
    },
    {
      "key": "customer-due-diligence",
      "question": {
        "sv": "Hur behandlar vi kunduppgifter vid kundkännedom (KYC)?",
        "en": "How do we process customer data for KYC checks?",
        "no": "Hvordan behandler vi kundedata ved kundekontroll (KYC)?",
        "de": "Wie verarbeiten wir Kundendaten bei der KYC-Prüfung?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=customer-due-diligence"
    },
    {
      "key": "web-analytics",
      "question": {
        "sv": "Får vi använda analysverktyg och kakor på webbplatsen?",
        "en": "Can we use analytics tools and cookies on our website?",
        "no": "Kan vi bruke analyseverktøy og informasjonskapsler?",
        "de": "Dürfen wir Analysetools und Cookies einsetzen?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=web-analytics"
    },
    {
      "key": "contract-processing",
      "question": {
        "sv": "Får vi behandla kunduppgifter för att leverera avtalet?",
        "en": "Can we process customer data to deliver the contract?",
        "no": "Kan vi behandle kundedata for å levere avtalen?",
        "de": "Dürfen wir Kundendaten zur Vertragserfüllung verarbeiten?"
      },
      "url": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?scenario=contract-processing"
    }
  ],
  "cross_regulation_readiness": [],
  "agent_hash": "aaeeb308bce1453bfdfc695f63016e67257e67d81f3b276f42b0847738855b20",
  "hash": "sha256:f8176b013083465f21f64425f78981fbd77f59c0d5f0aba0adcbb6ab276e551a",
  "endpoints": {
    "self": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6",
    "board": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?view=board",
    "audit": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6?view=audit",
    "index": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent"
  },
  "provenance": {
    "primary_source": "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
    "decisions": "published supervisory decisions in the NovaCopilot register",
    "method": "deterministic rules; editorial control mapping"
  },
  "source": "Source: NovaCopilot",
  "version": "legal-2026-10-18",
  "expires": "2026-10-19T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-18+legal-2026-10-18+2026-10-18T13:14:36",
    "content_hash": "sha256:f8176b013083465f21f64425f78981fbd77f59c0d5f0aba0adcbb6ab276e551a",
    "revalidate_after": "2026-10-18T14:33:21.486Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/gdpr-agent/art-6",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "industry_model": 6,
    "authority_decisions": 275,
    "case_outcomes": 3,
    "control_mappings": 6,
    "evidence_requirements": 3,
    "risk_patterns": 7,
    "decision_intelligence": 3,
    "board_report": 3,
    "edges": 1380,
    "scenarios.evaluation": 18,
    "supervisory_authority": 2,
    "sanction_benchmark": 8,
    "industry_risk_profile": 6,
    "impact_model": 4,
    "decision_pathway": 6,
    "audit_evidence_pack": 3,
    "authority_benchmark": 5,
    "peer_comparison": 5,
    "recurring_trends": 4,
    "control_effectiveness": 3,
    "compliance_maturity": 2,
    "remediation_estimate": 5,
    "executive_summary": 5
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}