{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:gdpr", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:gdpr)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-09", "fingerprint": "ewai:eu:b4289a", "proof": "sha256:4d03b0758ea2c07087a0e1da366b43f6659ba369bce6e3afb434bcce771e27c9", "jurisdiction": "eu", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "status": "ok", "tier": "enterprise", "graph_id": "graph:provenance:eu:gdpr", "graph_type": "provenance_graph", "schema_version": 1, "ref": "eu:gdpr", "nodes": [ { "id": "obligation:eu:gdpr-art-24-controller", "type": "conclusion", "label": "Implement and demonstrate measures that make processing compliant.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "type": "primary_source", "label": "GDPR: Regulation (EU) 2016/679", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "provision": "24" } }, { "id": "derivation:obligation:eu:gdpr-art-24-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-24-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-24-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:24", "type": "provision", "label": "provision:eu:gdpr:24", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62023CJ0492", "type": "judgment", "label": "C-492/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492", "data": { "decided": "2025-12-02", "ecli": "ECLI:EU:C:2025:935", "court": "CJ", "match": "keywords cite 2016/679 and Article 24" } }, { "id": "judgment:eu:62021CJ0340", "type": "judgment", "label": "C-340/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0340", "data": { "decided": "2023-12-14", "ecli": "ECLI:EU:C:2023:986", "court": "CJ", "match": "keywords cite 2016/679 and Article 24" } }, { "id": "judgment:eu:62021CJ0129", "type": "judgment", "label": "C-129/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0129", "data": { "decided": "2022-10-27", "ecli": "ECLI:EU:C:2022:833", "court": "CJ", "match": "keywords cite 2016/679 and Article 24" } }, { "id": "judgment:eu:62017CJ0496", "type": "judgment", "label": "C-496/17", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0496", "data": { "decided": "2019-01-16", "ecli": "ECLI:EU:C:2019:26", "court": "CJ", "match": "keywords cite 2016/679 and Article 24" } }, { "id": "enforcement:fr:cnil:san-2026-009", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100", "data": { "decided": "2026-07-21", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "80f0639202b93089bcf03bff9caec1b0bb43cc7876fdc6349c87ae88817d1346" } }, { "id": "enforcement:fr:cnil:san-2026-003", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671", "data": { "decided": "2026-01-22", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "836b9a5c49b451ff664ec0116b2857360a753d88448be4f69d4df8d1ebfb5002" } }, { "id": "enforcement:fr:cnil:san-026-001", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594", "data": { "decided": "2026-01-08", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "14115e7e6ce46db26762f954ecde0e5a22f984ecf80bd060e52ed21a1644de8d" } }, { "id": "enforcement:fr:cnil:san-2026-001", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594", "data": { "decided": "2026-01-08", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "82ba0b21f351327b61805d965109c575b029a8b4ca51bc9d547175ffbd2c08cf" } }, { "id": "enforcement:fr:cnil:san-2026-002", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643", "data": { "decided": "2026-01-08", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "80218d091478371b2e5ed576114530acb5af55a7a505841c8a932cbee040e3ab" } }, { "id": "enforcement:fr:cnil:san-2025-008", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052266505", "data": { "decided": "2025-09-18", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "65f5132c0bd4df969899a87b4cdf3ade4dfc605a2f65b85a1823539e26a17564" } }, { "id": "enforcement:fr:cnil:san-2021-016", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044115170", "data": { "decided": "2021-09-24", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "2fb75647c07874d2028c753f1ef86ee2e31c1eadc5de21a28a3be31e3a8eecf5" } }, { "id": "obligation:eu:gdpr-art-25-controller", "type": "conclusion", "label": "Apply data protection by design and by default.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-25-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-25-controller:deadline", "type": "derivation", "label": "Action kit, anchored in article text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-25-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:25", "type": "provision", "label": "provision:eu:gdpr:25", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2026-008", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834", "data": { "decided": "2026-05-26", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "92db2a738a10f0230f506b5fb238d85157209f314eee1f50e9a73c078499fd5a" } }, { "id": "enforcement:fr:cnil:san-2025-015", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053151799", "data": { "decided": "2025-12-22", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "57fbcc3ecb1e23a92e30ce95efb83a70925caef1eab811239b2448c5e3db83ec" } }, { "id": "enforcement:fr:cnil:san-2022-025", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046907077", "data": { "decided": "2022-12-29", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "c0d8d163926a3390925866d805f687b6cca5a0b1060e4237fded220e69f5f2f0" } }, { "id": "enforcement:fr:cnil:san-2021-021", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044810599", "data": { "decided": "2021-12-28", "decision_type": "gdpr_fine", "amount": 300000, "currency": "EUR", "sha256": "ced0fd65b46c701f2bfbf1ed38616680ad1f1d3c8eff6bea9fa7f45baac480de" } }, { "id": "obligation:eu:gdpr-art-30-controller", "type": "conclusion", "label": "Keep records of processing activities.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-30-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-30-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-30-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:30", "type": "provision", "label": "provision:eu:gdpr:30", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2025-014", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053048614", "data": { "decided": "2025-12-11", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "f771e77c98c7f5efcd1f26bc904f1068f57fece159df4459e89da82447085eb2" } }, { "id": "enforcement:fr:cnil:san-2023-025", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049051422", "data": { "decided": "2023-12-29", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "7dbc5e2b8d538db9eaa4c83247f6f7fee83b66e75671e9da3962b0008665e2f3" } }, { "id": "enforcement:fr:cnil:san-2021-019", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044286815", "data": { "decided": "2021-10-29", "decision_type": "gdpr_fine", "amount": 400000, "currency": "EUR", "sha256": "d68d75d7545d4c74103383a3441f910af16c1878a327d0cade821be89eb99102" } }, { "id": "enforcement:fr:cnil:san-2021-014", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045", "data": { "decided": "2021-09-15", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "e34ad9a604153cce5fb6c54c4cecab3479b1c777ff7f0912202e0dad41347d4d" } }, { "id": "obligation:eu:gdpr-art-32-controller", "type": "conclusion", "label": "Ensure a level of security appropriate to the risk.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-32-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-32-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-32-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:32", "type": "provision", "label": "provision:eu:gdpr:32", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62023CJ0169", "type": "judgment", "label": "C-169/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0169", "data": { "decided": "2024-11-28", "ecli": "ECLI:EU:C:2024:988", "court": "CJ", "match": "keywords cite 2016/679 and Article 32" } }, { "id": "enforcement:fr:cnil:san-2025-017", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342", "data": { "decided": "2025-12-30", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "d7bd99183864a514c4d678b673f2999277e873831af93237a19b672d49143602" } }, { "id": "enforcement:fr:cnil:san-2025-002", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051660380", "data": { "decided": "2025-05-15", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "490492209b98956c63ba5d194405b6b1496287cf35ae46b47589713ad123018c" } }, { "id": "enforcement:fr:cnil:san-2024-021", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331", "data": { "decided": "2024-12-19", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "966a155389d2cd6adbc3ed11f3cf439fe06fac587cb8323d18bad4501b6b387a" } }, { "id": "obligation:eu:gdpr-art-33-controller", "type": "conclusion", "label": "Notify a personal data breach to the supervisory authority.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-33-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-33-controller:deadline", "type": "derivation", "label": "Read verbatim from the provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-33-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:33", "type": "provision", "label": "provision:eu:gdpr:33", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2023-015", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771", "data": { "decided": "2023-10-12", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "0b7c146c6c49957f91a5fa896bf242c6db1fab941ba9a34e2bcfd31c4aa3ebf5" } }, { "id": "enforcement:fr:cnil:san-2023-008", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157", "data": { "decided": "2023-06-08", "decision_type": "gdpr_fine", "amount": 150000, "currency": "EUR", "sha256": "23878cebe18c21f8161b6002b619aa088db0f5d79ce3f8db5fbb9388ed16d8a8" } }, { "id": "enforcement:fr:cnil:san-2022-022", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390", "data": { "decided": "2022-11-30", "decision_type": "gdpr_fine", "amount": 300000, "currency": "EUR", "sha256": "5c74f1c93741ca0680a46085b8f21e5c3dbf37095ad808e3a7310982823ea141" } }, { "id": "enforcement:fr:cnil:san-2020-015", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042676787", "data": { "decided": "2020-12-07", "decision_type": "gdpr_fine", "amount": 6000, "currency": "EUR", "sha256": "ee89c97f4657d253bc2b4f2935a52f1c1324a0868d1b502ba805d4fec662204b" } }, { "id": "enforcement:fr:cnil:san-2020-014", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042675720", "data": { "decided": "2020-12-07", "decision_type": "gdpr_fine", "amount": 3000, "currency": "EUR", "sha256": "a3b8039448eae02ab4e3a58727f5fe7955f37381cfa46ceefdad430c598916d0" } }, { "id": "enforcement:fr:cnil:san-2020-008", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042563756", "data": { "decided": "2020-11-18", "decision_type": "gdpr_fine", "amount": 2250000, "currency": "EUR", "sha256": "03e77bb6b39aa54665eb3adfacd6fd56eb3e99d6a3ed7c428706eaecabbce983" } }, { "id": "obligation:eu:gdpr-art-35-controller", "type": "conclusion", "label": "Carry out a data protection impact assessment for high-risk processing.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-35-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-35-controller:deadline", "type": "derivation", "label": "Action kit, anchored in article text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-35-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:35", "type": "provision", "label": "provision:eu:gdpr:35", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62022CJ0061", "type": "judgment", "label": "C-61/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0061", "data": { "decided": "2024-03-21", "ecli": "ECLI:EU:C:2024:251", "court": "CJ", "match": "keywords cite 2016/679 and Article 35" } }, { "id": "enforcement:fr:cnil:san-2023-009", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063", "data": { "decided": "2023-06-15", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "8dda96e4c0715882a9525acaf88caa0f68c57c56c2bfc4a3ceb65bdcca395f3f" } }, { "id": "enforcement:fr:cnil:san-2022-020", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676", "data": { "decided": "2022-11-10", "decision_type": "gdpr_fine", "amount": 800000, "currency": "EUR", "sha256": "86feb5b94301b227280bd9b88bd68116fd70a0d11958aa663422a182224403f8" } }, { "id": "obligation:eu:gdpr-art-28-processor", "type": "conclusion", "label": "Process only on documented instructions under a written contract.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-28-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-28-processor:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-28-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:28", "type": "provision", "label": "provision:eu:gdpr:28", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2024-002", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049128617", "data": { "decided": "2024-01-31", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "ff3fc5c3bbdfab343e37c9416c131c2a68ebd7e0b0d8235ec51d6b1af1c45d11" } }, { "id": "enforcement:fr:cnil:san-2022-009", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045614368", "data": { "decided": "2022-04-15", "decision_type": "gdpr_fine", "amount": 1500000, "currency": "EUR", "sha256": "71139193c509ecf185e1d87d27032f43a0330b8d333d0bd9440d88ad1f19e064" } }, { "id": "enforcement:fr:cnil:san-2021-020", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044609709", "data": { "decided": "2021-12-28", "decision_type": "gdpr_fine", "amount": 180000, "currency": "EUR", "sha256": "36f8333aedb20f27b72dbde44dfc9f7cc6dedca6a7bed14e072647d7733b6cd5" } }, { "id": "enforcement:fr:cnil:san-2021-012", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043860997", "data": { "decided": "2021-07-26", "decision_type": "gdpr_fine", "amount": 400000, "currency": "EUR", "sha256": "29dfb0034905268d3b816860b696609f0f88b75a96eddc04cf5a7adeca7bcaed" } }, { "id": "enforcement:fr:cnil:san-2020-016", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042774286", "data": { "decided": "2020-12-07", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "55e45c1bd144486e7aa08a154a4e20ae00ae07733b05278aa478b38120f1836d" } }, { "id": "obligation:eu:gdpr-art-32-processor", "type": "conclusion", "label": "Ensure a level of security appropriate to the risk.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-32-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-32-processor:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-32-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-33-processor", "type": "conclusion", "label": "Notify the controller without undue delay after becoming aware of a breach.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "internal_legal_review", "note": "Action kit reviewed against article text; not advice in an individual case." } } }, { "id": "derivation:obligation:eu:gdpr-art-33-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-33-processor:deadline", "type": "derivation", "label": "Action kit, anchored in article text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-33-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-5-controller", "type": "conclusion", "label": "Process personal data in line with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and be able to demonstrate compliance (accountability).", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-5-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-5-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-5-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:5", "type": "provision", "label": "provision:eu:gdpr:5", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62024CJ0798", "type": "judgment", "label": "C-798/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0798", "data": { "decided": "2026-09-03", "ecli": "ECLI:EU:C:2026:679", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62024CJ0474", "type": "judgment", "label": "C-474/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0474", "data": { "decided": "2026-07-14", "ecli": "ECLI:EU:C:2026:579", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62024CJ0484", "type": "judgment", "label": "C-484/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0484", "data": { "decided": "2026-06-18", "ecli": "ECLI:EU:C:2026:496", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62023CJ0247", "type": "judgment", "label": "C-247/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0247", "data": { "decided": "2025-03-13", "ecli": "ECLI:EU:C:2025:172", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62023CJ0394", "type": "judgment", "label": "C-394/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0394", "data": { "decided": "2025-01-09", "ecli": "ECLI:EU:C:2025:2", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62023CJ0065", "type": "judgment", "label": "C-65/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0065", "data": { "decided": "2024-12-19", "ecli": "ECLI:EU:C:2024:1051", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62021CJ0446", "type": "judgment", "label": "C-446/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0446", "data": { "decided": "2024-10-04", "ecli": "ECLI:EU:C:2024:834", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62022CJ0621", "type": "judgment", "label": "C-621/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0621", "data": { "decided": "2024-10-04", "ecli": "ECLI:EU:C:2024:858", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "judgment:eu:62021CJ0687", "type": "judgment", "label": "C-687/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0687", "data": { "decided": "2024-01-25", "ecli": "ECLI:EU:C:2024:72", "court": "CJ", "match": "keywords cite 2016/679 and Article 5" } }, { "id": "enforcement:fr:cnil:san-2024-020", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828", "data": { "decided": "2024-12-05", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "a3efc15337a4670a98626da9663e1446a8902820675d389bb718f5f739701820" } }, { "id": "obligation:eu:gdpr-art-6-controller", "type": "conclusion", "label": "Process personal data only where at least one legal basis in Article 6(1) applies.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-6-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-6-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-6-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:6", "type": "provision", "label": "provision:eu:gdpr:6", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62024CJ0312", "type": "judgment", "label": "C-312/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0312", "data": { "decided": "2026-06-04", "ecli": "ECLI:EU:C:2026:449", "court": "CJ", "match": "keywords cite 2016/679 and Article 6" } }, { "id": "judgment:eu:62023CJ0654", "type": "judgment", "label": "C-654/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0654", "data": { "decided": "2025-11-13", "ecli": "ECLI:EU:C:2025:871", "court": "CJ", "match": "keywords cite 2016/679 and Article 6" } }, { "id": "judgment:eu:62023CJ0710", "type": "judgment", "label": "C-710/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0710", "data": { "decided": "2025-04-03", "ecli": "ECLI:EU:C:2025:231", "court": "CJ", "match": "keywords cite 2016/679 and Article 6" } }, { "id": "judgment:eu:62021CJ0667", "type": "judgment", "label": "C-667/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0667", "data": { "decided": "2023-12-21", "ecli": "ECLI:EU:C:2023:1022", "court": "CJ", "match": "keywords cite 2016/679 and Article 6" } }, { "id": "judgment:eu:62022CJ0319", "type": "judgment", "label": "C-319/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0319", "data": { "decided": "2023-11-09", "ecli": "ECLI:EU:C:2023:837", "court": "CJ", "match": "keywords cite 2016/679 and Article 6" } }, { "id": "enforcement:fr:cnil:san-2025-001", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051630617", "data": { "decided": "2025-05-15", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "7e981a2cf580d084c01ab6d07e34f9f8cb1ba3f7d12106b018dd58035928d357" } }, { "id": "enforcement:fr:cnil:san-2024-004", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049382214", "data": { "decided": "2024-04-04", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "790ced95965ff376b35739023482e2a120af1ff0141d7222be206266cb897a31" } }, { "id": "enforcement:fr:cnil:san-2024-003", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049231950", "data": { "decided": "2024-01-31", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "a155191d995c9dea5114423bce74d49ad78d78614417c0f68bef92b4d36bf30e" } }, { "id": "enforcement:fr:cnil:san-2023-021", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048989272", "data": { "decided": "2023-12-27", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "148a6d06446ee0ecb55bb4781febc89f5a0f9ffe33a1d9d0aa801e345eac26c5" } }, { "id": "obligation:eu:gdpr-art-12-controller", "type": "conclusion", "label": "Provide information on action taken on a data subject request under Articles 15 to 22 without undue delay and in any event within one month of receipt of the request.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-12-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-12-controller:deadline", "type": "derivation", "label": "Read verbatim from the provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-12-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:12", "type": "provision", "label": "provision:eu:gdpr:12", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62024CJ0526", "type": "judgment", "label": "C-526/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0526", "data": { "decided": "2026-03-19", "ecli": "ECLI:EU:C:2026:216", "court": "CJ", "match": "keywords cite 2016/679 and Article 12" } }, { "id": "judgment:eu:62022CJ0757", "type": "judgment", "label": "C-757/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0757", "data": { "decided": "2024-07-11", "ecli": "ECLI:EU:C:2024:598", "court": "CJ", "match": "keywords cite 2016/679 and Article 12" } }, { "id": "judgment:eu:62022CJ0307", "type": "judgment", "label": "C-307/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0307", "data": { "decided": "2023-10-26", "ecli": "ECLI:EU:C:2023:811", "court": "CJ", "match": "keywords cite 2016/679 and Article 12" } }, { "id": "judgment:eu:62020CJ0460", "type": "judgment", "label": "C-460/20", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0460", "data": { "decided": "2022-12-08", "ecli": "ECLI:EU:C:2022:962", "court": "CJ", "match": "keywords cite 2016/679 and Article 12" } }, { "id": "enforcement:fr:cnil:san-2026-010", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054810440", "data": { "decided": "2026-07-21", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "458570c7b8605fcbb82d92876f306e013e1bd6d8b05d544fffa07841795cbb7b" } }, { "id": "enforcement:fr:cnil:san-2023-023", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048907667", "data": { "decided": "2023-12-29", "decision_type": "gdpr_fine", "amount": 90000, "currency": "EUR", "sha256": "217d4e0e54cf24bca1571561b9be0464d6ca8ce031a6f06f86f107ff6547d0e9" } }, { "id": "obligation:eu:gdpr-art-15-controller", "type": "conclusion", "label": "Give the data subject confirmation as to whether personal data concerning him or her are being processed, access to the personal data and the information listed in Article 15(1), and a copy of the data.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-15-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-15-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-15-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:15", "type": "provision", "label": "provision:eu:gdpr:15", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62022CJ0203", "type": "judgment", "label": "C-203/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0203", "data": { "decided": "2025-02-27", "ecli": "ECLI:EU:C:2025:117", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62022CJ0461", "type": "judgment", "label": "C-461/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0461", "data": { "decided": "2024-07-11", "ecli": "ECLI:EU:C:2024:607", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62023CO0312", "type": "judgment", "label": "C-312/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CO0312", "data": { "decided": "2024-05-27", "ecli": "ECLI:EU:C:2024:458", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62021CJ0579", "type": "judgment", "label": "C-579/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0579", "data": { "decided": "2023-06-22", "ecli": "ECLI:EU:C:2023:501", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62021CJ0487", "type": "judgment", "label": "C-487/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0487", "data": { "decided": "2023-05-04", "ecli": "ECLI:EU:C:2023:369", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62021CJ0154", "type": "judgment", "label": "C-154/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0154", "data": { "decided": "2023-01-12", "ecli": "ECLI:EU:C:2023:3", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62019CJ0597", "type": "judgment", "label": "C-597/19", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597", "data": { "decided": "2021-06-17", "ecli": "ECLI:EU:C:2021:492", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "judgment:eu:62019CJ0272", "type": "judgment", "label": "C-272/19", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0272", "data": { "decided": "2020-07-09", "ecli": "ECLI:EU:C:2020:535", "court": "CJ", "match": "keywords cite 2016/679 and Article 15" } }, { "id": "enforcement:fr:cnil:san-2022-021", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046650733", "data": { "decided": "2022-11-24", "decision_type": "gdpr_fine", "amount": 600000, "currency": "EUR", "sha256": "19366942f9345c51e1a9f954673352fefd2474fbc50452cbdf2b3ae8304fc532" } }, { "id": "enforcement:fr:cnil:san-2022-019", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046444859", "data": { "decided": "2022-10-17", "decision_type": "gdpr_fine", "amount": 20000000, "currency": "EUR", "sha256": "f9e9caeef7ad22f0d16df56a061e47bacdb00fb09a4c9bd14b5a691533eb98e8" } }, { "id": "enforcement:fr:cnil:san-2022-017", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046198070", "data": { "decided": "2022-08-03", "decision_type": "gdpr_fine", "amount": 600000, "currency": "EUR", "sha256": "7c1b78adf788a88180ded819f142a5f767bb5c3f545521e25543baef25bdd7c0" } }, { "id": "enforcement:fr:cnil:san-2022-011", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045975295", "data": { "decided": "2022-06-23", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "4b29ce431145486535d5bde52463950a79b342becdb1d184888c1854b0911384" } }, { "id": "enforcement:fr:cnil:san-2022-002", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045066253", "data": { "decided": "2022-01-13", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "2ff174184b4c59a9bf9c24bc7aea586ef174e7eb8d8f25be74b4bc805c36d3b1" } }, { "id": "obligation:eu:gdpr-art-17-controller", "type": "conclusion", "label": "Erase personal data without undue delay where one of the grounds in Article 17(1) applies.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-17-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-17-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-17-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:17", "type": "provision", "label": "provision:eu:gdpr:17", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62023CJ0655", "type": "judgment", "label": "C-655/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0655", "data": { "decided": "2025-09-04", "ecli": "ECLI:EU:C:2025:655", "court": "CJ", "match": "keywords cite 2016/679 and Article 17" } }, { "id": "judgment:eu:62022CJ0060", "type": "judgment", "label": "C-60/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0060", "data": { "decided": "2023-05-04", "ecli": "ECLI:EU:C:2023:373", "court": "CJ", "match": "keywords cite 2016/679 and Article 17" } }, { "id": "enforcement:fr:cnil:san-2021-008", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043668709", "data": { "decided": "2021-06-14", "decision_type": "gdpr_fine", "amount": 500000, "currency": "EUR", "sha256": "f375680a6c08a5251748908c54a6f540fc95a7e538b04932b55bcb1a5acb4427" } }, { "id": "obligation:eu:gdpr-art-7-controller", "type": "conclusion", "label": "Be able to demonstrate consent where processing is based on consent, present consent requests clearly distinguishable from other matters, and make withdrawal as easy as giving consent.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-7-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-7-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-7-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:7", "type": "provision", "label": "provision:eu:gdpr:7", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62021CJ0204", "type": "judgment", "label": "C-204/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0204", "data": { "decided": "2023-06-05", "ecli": "ECLI:EU:C:2023:442", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62021CJ0268", "type": "judgment", "label": "C-268/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0268", "data": { "decided": "2023-03-02", "ecli": "ECLI:EU:C:2023:145", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62020CJ0184", "type": "judgment", "label": "C-184/20", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0184", "data": { "decided": "2022-08-01", "ecli": "ECLI:EU:C:2022:601", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62019CJ0817", "type": "judgment", "label": "C-817/19", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0817", "data": { "decided": "2022-06-21", "ecli": "ECLI:EU:C:2022:491", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62019CJ0645", "type": "judgment", "label": "C-645/19", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0645", "data": { "decided": "2021-06-15", "ecli": "ECLI:EU:C:2021:483", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62019CJ0061", "type": "judgment", "label": "C-61/19", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0061", "data": { "decided": "2020-11-11", "ecli": "ECLI:EU:C:2020:901", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "judgment:eu:62018CJ0311", "type": "judgment", "label": "C-311/18", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62018CJ0311", "data": { "decided": "2020-07-16", "ecli": "ECLI:EU:C:2020:559", "court": "CJ", "match": "keywords cite 2016/679 and Article 7" } }, { "id": "enforcement:fr:cnil:san-2025-010", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052851847", "data": { "decided": "2025-11-20", "decision_type": "gdpr_fine", "amount": 750000, "currency": "EUR", "sha256": "6970b25cc45bfa7dbd7c132f7a9a59a84a3df56914f588b203688eb2ca79ad00" } }, { "id": "enforcement:fr:cnil:san-2025-005", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052182271", "data": { "decided": "2025-09-01", "decision_type": "gdpr_fine", "amount": 150000000, "currency": "EUR", "sha256": "423b4ccf319e7f2419042d726c2c1718f8e1df59d1e6bd1732b070b51d8e789b" } }, { "id": "enforcement:fr:cnil:san-2021-023", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044840062", "data": { "decided": "2021-12-31", "decision_type": "gdpr_fine", "amount": 90000000, "currency": "EUR", "sha256": "9ad3fa9c97babf4f64dfb3739df1c8dffbd2aeed2e88d0d9cc3c0fe1a2739dd2" } }, { "id": "obligation:eu:gdpr-art-8-controller", "type": "conclusion", "label": "Obtain consent from the holder of parental responsibility when offering information society services directly to a child below 16, or the lower national age of at least 13, and make reasonable efforts to verify it.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-8-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-8-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-8-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:8", "type": "provision", "label": "provision:eu:gdpr:8", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62023CJ0021", "type": "judgment", "label": "C-21/23", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0021", "data": { "decided": "2024-10-04", "ecli": "ECLI:EU:C:2024:846", "court": "CJ", "match": "keywords cite 2016/679 and Article 8" } }, { "id": "judgment:eu:62017CJ0136", "type": "judgment", "label": "C-136/17", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0136", "data": { "decided": "2019-09-24", "ecli": "ECLI:EU:C:2019:773", "court": "CJ", "match": "keywords cite 2016/679 and Article 8" } }, { "id": "obligation:eu:gdpr-art-9-controller", "type": "conclusion", "label": "Do not process special categories of personal data unless an exception in Article 9(2) applies.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-9-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-9-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-9-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:9", "type": "provision", "label": "provision:eu:gdpr:9", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62021CJ0252", "type": "judgment", "label": "C-252/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0252", "data": { "decided": "2023-07-04", "ecli": "ECLI:EU:C:2023:537", "court": "CJ", "match": "keywords cite 2016/679 and Article 9" } }, { "id": "enforcement:fr:cnil:san-2024-013", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050202759", "data": { "decided": "2024-09-05", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "3e088847ed0f71c88b0095581fee8340b6b7ded2ad350508a22183b2caaed3f5" } }, { "id": "enforcement:fr:cnil:san-2023-013", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048110233", "data": { "decided": "2023-09-18", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "94c401461cf543cee1c89fcbe056585de67b1aff043096788c5f0984f6c04b56" } }, { "id": "enforcement:fr:cnil:san-2023-006", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047552103", "data": { "decided": "2023-05-11", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "62a03e936bc09bd2a58cb0a74768c0a15a223931e695798f6fae0ff123e1311e" } }, { "id": "obligation:eu:gdpr-art-13-controller", "type": "conclusion", "label": "Give the data subject the information listed in Article 13, including identity, purposes, legal basis, recipients, transfers, retention period and rights, when personal data are obtained from the data subject.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-13-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-13-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-13-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:13", "type": "provision", "label": "provision:eu:gdpr:13", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62024CJ0422", "type": "judgment", "label": "C-422/24", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0422", "data": { "decided": "2025-12-18", "ecli": "ECLI:EU:C:2025:980", "court": "CJ", "match": "keywords cite 2016/679 and Article 13" } }, { "id": "obligation:eu:gdpr-art-14-controller", "type": "conclusion", "label": "Give the data subject the information listed in Article 14 where personal data have not been obtained from the data subject, including the source of the data.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-14-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-14-controller:deadline", "type": "derivation", "label": "Read verbatim from the provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-14-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:14", "type": "provision", "label": "provision:eu:gdpr:14", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2021-010", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043829617", "data": { "decided": "2021-07-20", "decision_type": "gdpr_fine", "amount": 1750000, "currency": "EUR", "sha256": "29ebecdafc800aaa9b8328f32c02335e8abcdc635eba02f20a4d3090fa36f399" } }, { "id": "obligation:eu:gdpr-art-16-controller", "type": "conclusion", "label": "Rectify inaccurate personal data and complete incomplete data on the data subject's request.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-16-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-16-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-16-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:16", "type": "provision", "label": "provision:eu:gdpr:16", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62022CJ0033", "type": "judgment", "label": "C-33/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0033", "data": { "decided": "2024-01-16", "ecli": "ECLI:EU:C:2024:46", "court": "CJ", "match": "keywords cite 2016/679 and Article 16" } }, { "id": "judgment:eu:62020CJ0534", "type": "judgment", "label": "C-534/20", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0534", "data": { "decided": "2022-06-22", "ecli": "ECLI:EU:C:2022:495", "court": "CJ", "match": "keywords cite 2016/679 and Article 16" } }, { "id": "obligation:eu:gdpr-art-18-controller", "type": "conclusion", "label": "Restrict processing where the data subject contests accuracy, the processing is unlawful, the data are needed for legal claims or an objection is pending.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-18-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-18-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-18-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:18", "type": "provision", "label": "provision:eu:gdpr:18", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "obligation:eu:gdpr-art-19-controller", "type": "conclusion", "label": "Communicate any rectification, erasure or restriction to each recipient to whom the data have been disclosed, unless impossible or involving disproportionate effort.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-19-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-19-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-19-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:19", "type": "provision", "label": "provision:eu:gdpr:19", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "obligation:eu:gdpr-art-20-controller", "type": "conclusion", "label": "Provide personal data processed by automated means on the basis of consent or contract in a structured, commonly used and machine-readable format, and transmit it to another controller where technically feasible.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-20-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-20-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-20-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:20", "type": "provision", "label": "provision:eu:gdpr:20", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2023-024", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048967251", "data": { "decided": "2023-12-29", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "f6ad5e73cda49f84e50b6fdad3f2b7e0b30a9e16162c31781070b82337e5806a" } }, { "id": "enforcement:fr:cnil:san-2020-018", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042848036", "data": { "decided": "2020-12-08", "decision_type": "gdpr_fine", "amount": 20000, "currency": "EUR", "sha256": "61581116888cc8e32477cc42f7d5ebc16b3c4c86fe11fd4c011273135abed4d3" } }, { "id": "obligation:eu:gdpr-art-21-controller", "type": "conclusion", "label": "Stop processing based on Article 6(1)(e) or (f) on objection unless compelling legitimate grounds override, and always stop processing for direct marketing on objection.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-21-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-21-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-21-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:21", "type": "provision", "label": "provision:eu:gdpr:21", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2019-010", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000039419459", "data": { "decided": "2019-11-21", "decision_type": "gdpr_fine", "amount": 500000, "currency": "EUR", "sha256": "7da8f64b8845236299a0768bda87ab4b4cb61717617ef270d93cd55d4ea53938" } }, { "id": "obligation:eu:gdpr-art-22-controller", "type": "conclusion", "label": "Do not subject a data subject to a decision based solely on automated processing with legal or similarly significant effects unless an exception applies, and then provide human intervention, the right to express a view and to contest the decision.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-22-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-22-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-22-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:22", "type": "provision", "label": "provision:eu:gdpr:22", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62021CJ0634", "type": "judgment", "label": "C-634/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0634", "data": { "decided": "2023-12-07", "ecli": "ECLI:EU:C:2023:957", "court": "CJ", "match": "keywords cite 2016/679 and Article 22" } }, { "id": "obligation:eu:gdpr-art-26-controller", "type": "conclusion", "label": "Determine joint controllers' respective responsibilities in a transparent arrangement and make its essence available to the data subject.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-26-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-26-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-26-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:26", "type": "provision", "label": "provision:eu:gdpr:26", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "judgment:eu:62022CJ0604", "type": "judgment", "label": "C-604/22", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0604", "data": { "decided": "2024-03-07", "ecli": "ECLI:EU:C:2024:214", "court": "CJ", "match": "keywords cite 2016/679 and Article 26" } }, { "id": "judgment:eu:62021CJ0683", "type": "judgment", "label": "C-683/21", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0683", "data": { "decided": "2023-12-05", "ecli": "ECLI:EU:C:2023:949", "court": "CJ", "match": "keywords cite 2016/679 and Article 26" } }, { "id": "enforcement:fr:cnil:san-2023-016", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048388493", "data": { "decided": "2023-11-09", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "b5a5af8008b03d5251ee8d1cc5f717add0c27122382508aa5c89d5c403eec015" } }, { "id": "obligation:eu:gdpr-art-27-controller", "type": "conclusion", "label": "Designate in writing a representative in the Union when not established in the Union but subject to Article 3(2), unless the processing is occasional and low risk.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-27-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-27-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-27-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:27", "type": "provision", "label": "provision:eu:gdpr:27", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "obligation:eu:gdpr-art-31-controller", "type": "conclusion", "label": "Cooperate with the supervisory authority in the performance of its tasks on request.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-31-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-31-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-31-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:31", "type": "provision", "label": "provision:eu:gdpr:31", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "enforcement:fr:cnil:san-2023-018", "type": "enforcement_decision", "label": "cnil (fr)", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048580096", "data": { "decided": "2023-12-12", "decision_type": "sanction", "amount": null, "currency": null, "sha256": "2b753c4875d36739985b9384e8a1dece5c07555af5421dab5b27f40637745fca" } }, { "id": "obligation:eu:gdpr-art-34-controller", "type": "conclusion", "label": "Communicate a personal data breach likely to result in a high risk to the rights and freedoms of natural persons to the data subjects in clear and plain language.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-34-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-34-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-34-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:34", "type": "provision", "label": "provision:eu:gdpr:34", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "obligation:eu:gdpr-art-36-controller", "type": "conclusion", "label": "Consult the supervisory authority before processing where a data protection impact assessment indicates high risk in the absence of mitigating measures.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-36-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-36-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-36-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-37-controller", "type": "conclusion", "label": "Designate a data protection officer where the core activities are public authority processing, large-scale regular and systematic monitoring, or large-scale special category or criminal data, and publish the contact details.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-37-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-37-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-37-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-44-controller", "type": "conclusion", "label": "Transfer personal data to a third country or international organisation only under an adequacy decision, appropriate safeguards such as standard contractual clauses or binding corporate rules, or a derogation in Article 49.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-44-controller:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-44-controller:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-44-controller:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "provision:eu:gdpr:44", "type": "provision", "label": "provision:eu:gdpr:44", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "obligation:eu:gdpr-art-28-2-processor", "type": "conclusion", "label": "Do not engage another processor without prior specific or general written authorisation of the controller, and inform the controller of intended changes so it can object.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-28-2-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-28-2-processor:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-28-2-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-30-processor", "type": "conclusion", "label": "Maintain a written record of all categories of processing activities carried out on behalf of each controller.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-30-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-30-processor:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-30-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-4", "sanction:eu:gdpr-art-58-2" ] } }, { "id": "obligation:eu:gdpr-art-44-processor", "type": "conclusion", "label": "Transfer personal data to a third country or international organisation only under Chapter V safeguards.", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "review": { "status": "agent_formulated", "note": "Formulated from the source text; not yet externally verified." } } }, { "id": "derivation:obligation:eu:gdpr-art-44-processor:duty", "type": "derivation", "label": "Paraphrased from the provision text", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "duty", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-44-processor:deadline", "type": "derivation", "label": "No statutory deadline: not_in_register", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "deadline", "basis": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } }, { "id": "derivation:obligation:eu:gdpr-art-44-processor:sanctions", "type": "derivation", "label": "Act-level sanction rule matched by article", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "data": { "field": "sanctions", "basis": [ "sanction:eu:gdpr-art-83-5", "sanction:eu:gdpr-art-58-2" ] } } ], "edges": [ { "id": "edge:obligation:eu:gdpr-art-24-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-24-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-24-controller~explained_by~derivation:obligation:eu:gdpr-art-24-controller:duty", "from": "obligation:eu:gdpr-art-24-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-24-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-24-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-24-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-24-controller~explained_by~derivation:obligation:eu:gdpr-art-24-controller:deadline", "from": "obligation:eu:gdpr-art-24-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-24-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-24-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-24-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-24-controller~explained_by~derivation:obligation:eu:gdpr-art-24-controller:sanctions", "from": "obligation:eu:gdpr-art-24-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-24-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-24-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-24-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-24-controller~anchored_in~provision:eu:gdpr:24", "from": "obligation:eu:gdpr-art-24-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:24", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:24~verified_by_judgment~judgment:eu:62023CJ0492", "from": "provision:eu:gdpr:24", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0492", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492" }, { "id": "edge:provision:eu:gdpr:24~verified_by_judgment~judgment:eu:62021CJ0340", "from": "provision:eu:gdpr:24", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0340", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0340" }, { "id": "edge:provision:eu:gdpr:24~verified_by_judgment~judgment:eu:62021CJ0129", "from": "provision:eu:gdpr:24", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0129", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0129" }, { "id": "edge:provision:eu:gdpr:24~verified_by_judgment~judgment:eu:62017CJ0496", "from": "provision:eu:gdpr:24", "relation": "verified_by_judgment", "to": "judgment:eu:62017CJ0496", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0496" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2025-008", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052266505" }, { "id": "edge:provision:eu:gdpr:24~verified_by_enforcement~enforcement:fr:cnil:san-2021-016", "from": "provision:eu:gdpr:24", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-016", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044115170" }, { "id": "edge:obligation:eu:gdpr-art-25-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-25-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-25-controller~explained_by~derivation:obligation:eu:gdpr-art-25-controller:duty", "from": "obligation:eu:gdpr-art-25-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-25-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-25-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-25-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-25-controller~explained_by~derivation:obligation:eu:gdpr-art-25-controller:deadline", "from": "obligation:eu:gdpr-art-25-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-25-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-25-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-25-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-25-controller~explained_by~derivation:obligation:eu:gdpr-art-25-controller:sanctions", "from": "obligation:eu:gdpr-art-25-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-25-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-25-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-25-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-25-controller~anchored_in~provision:eu:gdpr:25", "from": "obligation:eu:gdpr-art-25-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:25", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2025-015", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053151799" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2022-025", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-025", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046907077" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2021-021", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044810599" }, { "id": "edge:provision:eu:gdpr:25~verified_by_enforcement~enforcement:fr:cnil:san-2021-016", "from": "provision:eu:gdpr:25", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-016", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044115170" }, { "id": "edge:obligation:eu:gdpr-art-30-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-30-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-controller~explained_by~derivation:obligation:eu:gdpr-art-30-controller:duty", "from": "obligation:eu:gdpr-art-30-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-controller~explained_by~derivation:obligation:eu:gdpr-art-30-controller:deadline", "from": "obligation:eu:gdpr-art-30-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-controller~explained_by~derivation:obligation:eu:gdpr-art-30-controller:sanctions", "from": "obligation:eu:gdpr-art-30-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-controller~anchored_in~provision:eu:gdpr:30", "from": "obligation:eu:gdpr-art-30-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:30", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2025-014", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053048614" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2023-025", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-025", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049051422" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2021-019", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-019", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044286815" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2021-014", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045" }, { "id": "edge:obligation:eu:gdpr-art-32-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-32-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-controller~explained_by~derivation:obligation:eu:gdpr-art-32-controller:duty", "from": "obligation:eu:gdpr-art-32-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-controller~explained_by~derivation:obligation:eu:gdpr-art-32-controller:deadline", "from": "obligation:eu:gdpr-art-32-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-controller~explained_by~derivation:obligation:eu:gdpr-art-32-controller:sanctions", "from": "obligation:eu:gdpr-art-32-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-controller~anchored_in~provision:eu:gdpr:32", "from": "obligation:eu:gdpr-art-32-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:32", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:32~verified_by_judgment~judgment:eu:62023CJ0169", "from": "provision:eu:gdpr:32", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0169", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0169" }, { "id": "edge:provision:eu:gdpr:32~verified_by_judgment~judgment:eu:62021CJ0340", "from": "provision:eu:gdpr:32", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0340", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0340" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-017", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-015", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053151799" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-002", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051660380" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:obligation:eu:gdpr-art-33-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-33-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-controller~explained_by~derivation:obligation:eu:gdpr-art-33-controller:duty", "from": "obligation:eu:gdpr-art-33-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-controller~explained_by~derivation:obligation:eu:gdpr-art-33-controller:deadline", "from": "obligation:eu:gdpr-art-33-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-controller~explained_by~derivation:obligation:eu:gdpr-art-33-controller:sanctions", "from": "obligation:eu:gdpr-art-33-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-controller~anchored_in~provision:eu:gdpr:33", "from": "obligation:eu:gdpr-art-33-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:33", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2025-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052266505" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-015", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042676787" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-014", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042675720" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042563756" }, { "id": "edge:obligation:eu:gdpr-art-35-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-35-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-35-controller~explained_by~derivation:obligation:eu:gdpr-art-35-controller:duty", "from": "obligation:eu:gdpr-art-35-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-35-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-35-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-35-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-35-controller~explained_by~derivation:obligation:eu:gdpr-art-35-controller:deadline", "from": "obligation:eu:gdpr-art-35-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-35-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-35-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-35-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-35-controller~explained_by~derivation:obligation:eu:gdpr-art-35-controller:sanctions", "from": "obligation:eu:gdpr-art-35-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-35-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-35-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-35-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-35-controller~anchored_in~provision:eu:gdpr:35", "from": "obligation:eu:gdpr-art-35-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:35", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:35~verified_by_judgment~judgment:eu:62022CJ0061", "from": "provision:eu:gdpr:35", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0061", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0061" }, { "id": "edge:provision:eu:gdpr:35~verified_by_enforcement~enforcement:fr:cnil:san-2025-017", "from": "provision:eu:gdpr:35", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342" }, { "id": "edge:provision:eu:gdpr:35~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:35", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:provision:eu:gdpr:35~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:35", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:35~verified_by_enforcement~enforcement:fr:cnil:san-2022-020", "from": "provision:eu:gdpr:35", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676" }, { "id": "edge:obligation:eu:gdpr-art-28-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-28-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-processor~explained_by~derivation:obligation:eu:gdpr-art-28-processor:duty", "from": "obligation:eu:gdpr-art-28-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-processor~explained_by~derivation:obligation:eu:gdpr-art-28-processor:deadline", "from": "obligation:eu:gdpr-art-28-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-processor~explained_by~derivation:obligation:eu:gdpr-art-28-processor:sanctions", "from": "obligation:eu:gdpr-art-28-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-processor~anchored_in~provision:eu:gdpr:28", "from": "obligation:eu:gdpr-art-28-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:28", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2025-014", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053048614" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2024-002", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049128617" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2022-009", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045614368" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2021-020", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044609709" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2021-012", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-012", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043860997" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2020-016", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-016", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042774286" }, { "id": "edge:obligation:eu:gdpr-art-32-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-32-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-processor~explained_by~derivation:obligation:eu:gdpr-art-32-processor:duty", "from": "obligation:eu:gdpr-art-32-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-processor~explained_by~derivation:obligation:eu:gdpr-art-32-processor:deadline", "from": "obligation:eu:gdpr-art-32-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-processor~explained_by~derivation:obligation:eu:gdpr-art-32-processor:sanctions", "from": "obligation:eu:gdpr-art-32-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-32-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-32-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-32-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-32-processor~anchored_in~provision:eu:gdpr:32", "from": "obligation:eu:gdpr-art-32-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:32", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:32~verified_by_judgment~judgment:eu:62023CJ0169", "from": "provision:eu:gdpr:32", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0169", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0169" }, { "id": "edge:provision:eu:gdpr:32~verified_by_judgment~judgment:eu:62021CJ0340", "from": "provision:eu:gdpr:32", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0340", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0340" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-017", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-015", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053151799" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2025-002", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051660380" }, { "id": "edge:provision:eu:gdpr:32~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:32", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:obligation:eu:gdpr-art-33-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-33-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-processor~explained_by~derivation:obligation:eu:gdpr-art-33-processor:duty", "from": "obligation:eu:gdpr-art-33-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-processor~explained_by~derivation:obligation:eu:gdpr-art-33-processor:deadline", "from": "obligation:eu:gdpr-art-33-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-processor~explained_by~derivation:obligation:eu:gdpr-art-33-processor:sanctions", "from": "obligation:eu:gdpr-art-33-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-33-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-33-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-33-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-33-processor~anchored_in~provision:eu:gdpr:33", "from": "obligation:eu:gdpr-art-33-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:33", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2025-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052266505" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-015", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042676787" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-014", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042675720" }, { "id": "edge:provision:eu:gdpr:33~verified_by_enforcement~enforcement:fr:cnil:san-2020-008", "from": "provision:eu:gdpr:33", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042563756" }, { "id": "edge:obligation:eu:gdpr-art-5-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-5-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-5-controller~explained_by~derivation:obligation:eu:gdpr-art-5-controller:duty", "from": "obligation:eu:gdpr-art-5-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-5-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-5-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-5-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-5-controller~explained_by~derivation:obligation:eu:gdpr-art-5-controller:deadline", "from": "obligation:eu:gdpr-art-5-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-5-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-5-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-5-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-5-controller~explained_by~derivation:obligation:eu:gdpr-art-5-controller:sanctions", "from": "obligation:eu:gdpr-art-5-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-5-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-5-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-5-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-5-controller~anchored_in~provision:eu:gdpr:5", "from": "obligation:eu:gdpr-art-5-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:5", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62024CJ0798", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0798", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0798" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62024CJ0474", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0474", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0474" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62024CJ0484", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0484", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0484" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62023CJ0492", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0492", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62023CJ0247", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0247", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0247" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62023CJ0394", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0394", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0394" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62023CJ0065", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0065", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0065" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62021CJ0446", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0446", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0446" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62022CJ0621", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0621", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0621" }, { "id": "edge:provision:eu:gdpr:5~verified_by_judgment~judgment:eu:62021CJ0687", "from": "provision:eu:gdpr:5", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0687", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0687" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2025-008", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052266505" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2024-020", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2023-025", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-025", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049051422" }, { "id": "edge:provision:eu:gdpr:5~verified_by_enforcement~enforcement:fr:cnil:san-2022-020", "from": "provision:eu:gdpr:5", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676" }, { "id": "edge:obligation:eu:gdpr-art-6-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-6-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-6-controller~explained_by~derivation:obligation:eu:gdpr-art-6-controller:duty", "from": "obligation:eu:gdpr-art-6-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-6-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-6-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-6-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-6-controller~explained_by~derivation:obligation:eu:gdpr-art-6-controller:deadline", "from": "obligation:eu:gdpr-art-6-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-6-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-6-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-6-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-6-controller~explained_by~derivation:obligation:eu:gdpr-art-6-controller:sanctions", "from": "obligation:eu:gdpr-art-6-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-6-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-6-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-6-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-6-controller~anchored_in~provision:eu:gdpr:6", "from": "obligation:eu:gdpr-art-6-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:6", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62024CJ0798", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0798", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0798" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62024CJ0484", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0484", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0484" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62024CJ0312", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0312", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0312" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62023CJ0654", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0654", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0654" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62023CJ0710", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0710", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0710" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62023CJ0394", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0394", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0394" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62023CJ0065", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0065", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0065" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62022CJ0621", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0621", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0621" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62021CJ0667", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0667", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0667" }, { "id": "edge:provision:eu:gdpr:6~verified_by_judgment~judgment:eu:62022CJ0319", "from": "provision:eu:gdpr:6", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0319", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0319" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2025-017", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2025-001", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051630617" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2025-002", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051660380" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2024-020", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2024-004", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-004", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049382214" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2024-002", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049128617" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2024-003", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049231950" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2023-025", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-025", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049051422" }, { "id": "edge:provision:eu:gdpr:6~verified_by_enforcement~enforcement:fr:cnil:san-2023-021", "from": "provision:eu:gdpr:6", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048989272" }, { "id": "edge:obligation:eu:gdpr-art-12-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-12-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-12-controller~explained_by~derivation:obligation:eu:gdpr-art-12-controller:duty", "from": "obligation:eu:gdpr-art-12-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-12-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-12-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-12-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-12-controller~explained_by~derivation:obligation:eu:gdpr-art-12-controller:deadline", "from": "obligation:eu:gdpr-art-12-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-12-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-12-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-12-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-12-controller~explained_by~derivation:obligation:eu:gdpr-art-12-controller:sanctions", "from": "obligation:eu:gdpr-art-12-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-12-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-12-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-12-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-12-controller~anchored_in~provision:eu:gdpr:12", "from": "obligation:eu:gdpr-art-12-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:12", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62024CJ0526", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0526", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0526" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62023CJ0492", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0492", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62022CJ0757", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0757", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0757" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62022CJ0307", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0307", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0307" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62020CJ0460", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0460", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0460" }, { "id": "edge:provision:eu:gdpr:12~verified_by_judgment~judgment:eu:62021CJ0129", "from": "provision:eu:gdpr:12", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0129", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0129" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2026-010", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054810440" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2024-020", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2023-023", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-023", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048907667" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2023-021", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048989272" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:12~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:12", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:obligation:eu:gdpr-art-15-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-15-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-15-controller~explained_by~derivation:obligation:eu:gdpr-art-15-controller:duty", "from": "obligation:eu:gdpr-art-15-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-15-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-15-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-15-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-15-controller~explained_by~derivation:obligation:eu:gdpr-art-15-controller:deadline", "from": "obligation:eu:gdpr-art-15-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-15-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-15-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-15-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-15-controller~explained_by~derivation:obligation:eu:gdpr-art-15-controller:sanctions", "from": "obligation:eu:gdpr-art-15-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-15-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-15-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-15-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-15-controller~anchored_in~provision:eu:gdpr:15", "from": "obligation:eu:gdpr-art-15-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:15", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62024CJ0526", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0526", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0526" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62022CJ0203", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0203", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0203" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62022CJ0461", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0461", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0461" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62023CO0312", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62023CO0312", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CO0312" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62021CJ0579", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0579", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0579" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62021CJ0487", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0487", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0487" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62021CJ0154", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0154", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0154" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62019CJ0597", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0597", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597" }, { "id": "edge:provision:eu:gdpr:15~verified_by_judgment~judgment:eu:62019CJ0272", "from": "provision:eu:gdpr:15", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0272", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0272" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2024-020", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-021", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046650733" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-019", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-019", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046444859" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-017", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046198070" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-011", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-011", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045975295" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2022-002", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045066253" }, { "id": "edge:provision:eu:gdpr:15~verified_by_enforcement~enforcement:fr:cnil:san-2021-021", "from": "provision:eu:gdpr:15", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044810599" }, { "id": "edge:obligation:eu:gdpr-art-17-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-17-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-17-controller~explained_by~derivation:obligation:eu:gdpr-art-17-controller:duty", "from": "obligation:eu:gdpr-art-17-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-17-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-17-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-17-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-17-controller~explained_by~derivation:obligation:eu:gdpr-art-17-controller:deadline", "from": "obligation:eu:gdpr-art-17-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-17-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-17-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-17-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-17-controller~explained_by~derivation:obligation:eu:gdpr-art-17-controller:sanctions", "from": "obligation:eu:gdpr-art-17-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-17-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-17-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-17-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-17-controller~anchored_in~provision:eu:gdpr:17", "from": "obligation:eu:gdpr-art-17-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:17", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62024CJ0484", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0484", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0484" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62024CJ0312", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0312", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0312" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62023CJ0655", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0655", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0655" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62022CJ0060", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0060", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0060" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62020CJ0460", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0460", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0460" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62021CJ0129", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0129", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0129" }, { "id": "edge:provision:eu:gdpr:17~verified_by_judgment~judgment:eu:62019CJ0597", "from": "provision:eu:gdpr:17", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0597", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2026-010", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054810440" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2022-019", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-019", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046444859" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2021-014", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2021-008", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043668709" }, { "id": "edge:provision:eu:gdpr:17~verified_by_enforcement~enforcement:fr:cnil:san-2020-008", "from": "provision:eu:gdpr:17", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042563756" }, { "id": "edge:obligation:eu:gdpr-art-7-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-7-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-7-controller~explained_by~derivation:obligation:eu:gdpr-art-7-controller:duty", "from": "obligation:eu:gdpr-art-7-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-7-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-7-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-7-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-7-controller~explained_by~derivation:obligation:eu:gdpr-art-7-controller:deadline", "from": "obligation:eu:gdpr-art-7-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-7-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-7-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-7-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-7-controller~explained_by~derivation:obligation:eu:gdpr-art-7-controller:sanctions", "from": "obligation:eu:gdpr-art-7-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-7-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-7-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-7-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-7-controller~anchored_in~provision:eu:gdpr:7", "from": "obligation:eu:gdpr-art-7-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:7", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62022CJ0061", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0061", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0061" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62021CJ0204", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0204", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0204" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62021CJ0268", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0268", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0268" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62020CJ0460", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0460", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0460" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62020CJ0184", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0184", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0184" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62019CJ0817", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0817", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0817" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62019CJ0597", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0597", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62019CJ0645", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0645", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0645" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62019CJ0061", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0061", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0061" }, { "id": "edge:provision:eu:gdpr:7~verified_by_judgment~judgment:eu:62018CJ0311", "from": "provision:eu:gdpr:7", "relation": "verified_by_judgment", "to": "judgment:eu:62018CJ0311", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62018CJ0311" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2025-010", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052851847" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2025-005", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-005", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000052182271" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2025-001", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051630617" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2025-002", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051660380" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2022-022", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-022", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046693390" }, { "id": "edge:provision:eu:gdpr:7~verified_by_enforcement~enforcement:fr:cnil:san-2021-023", "from": "provision:eu:gdpr:7", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-023", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044840062" }, { "id": "edge:obligation:eu:gdpr-art-8-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-8-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-8-controller~explained_by~derivation:obligation:eu:gdpr-art-8-controller:duty", "from": "obligation:eu:gdpr-art-8-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-8-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-8-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-8-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-8-controller~explained_by~derivation:obligation:eu:gdpr-art-8-controller:deadline", "from": "obligation:eu:gdpr-art-8-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-8-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-8-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-8-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-8-controller~explained_by~derivation:obligation:eu:gdpr-art-8-controller:sanctions", "from": "obligation:eu:gdpr-art-8-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-8-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-8-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-8-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-8-controller~anchored_in~provision:eu:gdpr:8", "from": "obligation:eu:gdpr-art-8-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:8", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62023CJ0021", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0021", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0021" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62022CJ0061", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0061", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0061" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62021CJ0268", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0268", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0268" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62020CJ0184", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0184", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0184" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62019CJ0597", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0597", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597" }, { "id": "edge:provision:eu:gdpr:8~verified_by_judgment~judgment:eu:62017CJ0136", "from": "provision:eu:gdpr:8", "relation": "verified_by_judgment", "to": "judgment:eu:62017CJ0136", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0136" }, { "id": "edge:provision:eu:gdpr:8~verified_by_enforcement~enforcement:fr:cnil:san-2022-020", "from": "provision:eu:gdpr:8", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676" }, { "id": "edge:obligation:eu:gdpr-art-9-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-9-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-9-controller~explained_by~derivation:obligation:eu:gdpr-art-9-controller:duty", "from": "obligation:eu:gdpr-art-9-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-9-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-9-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-9-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-9-controller~explained_by~derivation:obligation:eu:gdpr-art-9-controller:deadline", "from": "obligation:eu:gdpr-art-9-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-9-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-9-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-9-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-9-controller~explained_by~derivation:obligation:eu:gdpr-art-9-controller:sanctions", "from": "obligation:eu:gdpr-art-9-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-9-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-9-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-9-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-9-controller~anchored_in~provision:eu:gdpr:9", "from": "obligation:eu:gdpr-art-9-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:9", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62024CJ0474", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0474", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0474" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62023CJ0492", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0492", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62023CJ0065", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0065", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0065" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62021CJ0446", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0446", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0446" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62023CJ0021", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0021", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0021" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62021CJ0667", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0667", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0667" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62021CJ0252", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0252", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0252" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62021CJ0204", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0204", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0204" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62020CJ0184", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0184", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0184" }, { "id": "edge:provision:eu:gdpr:9~verified_by_judgment~judgment:eu:62017CJ0136", "from": "provision:eu:gdpr:9", "relation": "verified_by_judgment", "to": "judgment:eu:62017CJ0136", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0136" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2025-015", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053151799" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2024-013", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-013", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050202759" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2023-013", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-013", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048110233" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:9~verified_by_enforcement~enforcement:fr:cnil:san-2023-006", "from": "provision:eu:gdpr:9", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-006", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047552103" }, { "id": "edge:obligation:eu:gdpr-art-13-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-13-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-13-controller~explained_by~derivation:obligation:eu:gdpr-art-13-controller:duty", "from": "obligation:eu:gdpr-art-13-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-13-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-13-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-13-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-13-controller~explained_by~derivation:obligation:eu:gdpr-art-13-controller:deadline", "from": "obligation:eu:gdpr-art-13-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-13-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-13-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-13-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-13-controller~explained_by~derivation:obligation:eu:gdpr-art-13-controller:sanctions", "from": "obligation:eu:gdpr-art-13-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-13-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-13-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-13-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-13-controller~anchored_in~provision:eu:gdpr:13", "from": "obligation:eu:gdpr-art-13-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:13", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:13~verified_by_judgment~judgment:eu:62024CJ0422", "from": "provision:eu:gdpr:13", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0422", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0422" }, { "id": "edge:provision:eu:gdpr:13~verified_by_judgment~judgment:eu:62023CJ0654", "from": "provision:eu:gdpr:13", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0654", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0654" }, { "id": "edge:provision:eu:gdpr:13~verified_by_judgment~judgment:eu:62022CJ0757", "from": "provision:eu:gdpr:13", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0757", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0757" }, { "id": "edge:provision:eu:gdpr:13~verified_by_judgment~judgment:eu:62019CJ0597", "from": "provision:eu:gdpr:13", "relation": "verified_by_judgment", "to": "judgment:eu:62019CJ0597", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0597" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2026-010", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054810440" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2025-017", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2025-001", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051630617" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2024-021", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051120331" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2024-002", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049128617" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2023-023", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-023", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048907667" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2023-021", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048989272" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:13~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:13", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:obligation:eu:gdpr-art-14-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-14-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-14-controller~explained_by~derivation:obligation:eu:gdpr-art-14-controller:duty", "from": "obligation:eu:gdpr-art-14-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-14-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-14-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-14-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-14-controller~explained_by~derivation:obligation:eu:gdpr-art-14-controller:deadline", "from": "obligation:eu:gdpr-art-14-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-14-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-14-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-14-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-14-controller~explained_by~derivation:obligation:eu:gdpr-art-14-controller:sanctions", "from": "obligation:eu:gdpr-art-14-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-14-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-14-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-14-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-14-controller~anchored_in~provision:eu:gdpr:14", "from": "obligation:eu:gdpr-art-14-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:14", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:14~verified_by_judgment~judgment:eu:62024CJ0798", "from": "provision:eu:gdpr:14", "relation": "verified_by_judgment", "to": "judgment:eu:62024CJ0798", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62024CJ0798" }, { "id": "edge:provision:eu:gdpr:14~verified_by_judgment~judgment:eu:62023CJ0169", "from": "provision:eu:gdpr:14", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0169", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0169" }, { "id": "edge:provision:eu:gdpr:14~verified_by_judgment~judgment:eu:62020CJ0460", "from": "provision:eu:gdpr:14", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0460", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0460" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2025-001", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000051630617" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2024-020", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000050791828" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2024-004", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-004", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049382214" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2022-021", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046650733" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2022-011", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-011", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045975295" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2021-012", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-012", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043860997" }, { "id": "edge:provision:eu:gdpr:14~verified_by_enforcement~enforcement:fr:cnil:san-2021-010", "from": "provision:eu:gdpr:14", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043829617" }, { "id": "edge:obligation:eu:gdpr-art-16-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-16-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-16-controller~explained_by~derivation:obligation:eu:gdpr-art-16-controller:duty", "from": "obligation:eu:gdpr-art-16-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-16-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-16-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-16-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-16-controller~explained_by~derivation:obligation:eu:gdpr-art-16-controller:deadline", "from": "obligation:eu:gdpr-art-16-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-16-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-16-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-16-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-16-controller~explained_by~derivation:obligation:eu:gdpr-art-16-controller:sanctions", "from": "obligation:eu:gdpr-art-16-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-16-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-16-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-16-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-16-controller~anchored_in~provision:eu:gdpr:16", "from": "obligation:eu:gdpr-art-16-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:16", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:16~verified_by_judgment~judgment:eu:62023CJ0247", "from": "provision:eu:gdpr:16", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0247", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0247" }, { "id": "edge:provision:eu:gdpr:16~verified_by_judgment~judgment:eu:62022CJ0033", "from": "provision:eu:gdpr:16", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0033", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0033" }, { "id": "edge:provision:eu:gdpr:16~verified_by_judgment~judgment:eu:62020CJ0534", "from": "provision:eu:gdpr:16", "relation": "verified_by_judgment", "to": "judgment:eu:62020CJ0534", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62020CJ0534" }, { "id": "edge:provision:eu:gdpr:16~verified_by_enforcement~enforcement:fr:cnil:san-2021-021", "from": "provision:eu:gdpr:16", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044810599" }, { "id": "edge:provision:eu:gdpr:16~verified_by_enforcement~enforcement:fr:cnil:san-2021-014", "from": "provision:eu:gdpr:16", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045" }, { "id": "edge:obligation:eu:gdpr-art-18-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-18-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-18-controller~explained_by~derivation:obligation:eu:gdpr-art-18-controller:duty", "from": "obligation:eu:gdpr-art-18-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-18-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-18-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-18-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-18-controller~explained_by~derivation:obligation:eu:gdpr-art-18-controller:deadline", "from": "obligation:eu:gdpr-art-18-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-18-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-18-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-18-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-18-controller~explained_by~derivation:obligation:eu:gdpr-art-18-controller:sanctions", "from": "obligation:eu:gdpr-art-18-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-18-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-18-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-18-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-18-controller~anchored_in~provision:eu:gdpr:18", "from": "obligation:eu:gdpr-art-18-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:18", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:18~verified_by_judgment~judgment:eu:62023CJ0655", "from": "provision:eu:gdpr:18", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0655", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0655" }, { "id": "edge:provision:eu:gdpr:18~verified_by_judgment~judgment:eu:62022CJ0060", "from": "provision:eu:gdpr:18", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0060", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0060" }, { "id": "edge:obligation:eu:gdpr-art-19-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-19-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-19-controller~explained_by~derivation:obligation:eu:gdpr-art-19-controller:duty", "from": "obligation:eu:gdpr-art-19-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-19-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-19-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-19-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-19-controller~explained_by~derivation:obligation:eu:gdpr-art-19-controller:deadline", "from": "obligation:eu:gdpr-art-19-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-19-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-19-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-19-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-19-controller~explained_by~derivation:obligation:eu:gdpr-art-19-controller:sanctions", "from": "obligation:eu:gdpr-art-19-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-19-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-19-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-19-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-19-controller~anchored_in~provision:eu:gdpr:19", "from": "obligation:eu:gdpr-art-19-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:19", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:19~verified_by_judgment~judgment:eu:62021CJ0204", "from": "provision:eu:gdpr:19", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0204", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0204" }, { "id": "edge:obligation:eu:gdpr-art-20-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-20-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-20-controller~explained_by~derivation:obligation:eu:gdpr-art-20-controller:duty", "from": "obligation:eu:gdpr-art-20-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-20-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-20-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-20-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-20-controller~explained_by~derivation:obligation:eu:gdpr-art-20-controller:deadline", "from": "obligation:eu:gdpr-art-20-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-20-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-20-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-20-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-20-controller~explained_by~derivation:obligation:eu:gdpr-art-20-controller:sanctions", "from": "obligation:eu:gdpr-art-20-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-20-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-20-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-20-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-20-controller~anchored_in~provision:eu:gdpr:20", "from": "obligation:eu:gdpr-art-20-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:20", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:20~verified_by_enforcement~enforcement:fr:cnil:san-2023-024", "from": "provision:eu:gdpr:20", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-024", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048967251" }, { "id": "edge:provision:eu:gdpr:20~verified_by_enforcement~enforcement:fr:cnil:san-2020-018", "from": "provision:eu:gdpr:20", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-018", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042848036" }, { "id": "edge:provision:eu:gdpr:20~verified_by_enforcement~enforcement:fr:cnil:san-2020-008", "from": "provision:eu:gdpr:20", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042563756" }, { "id": "edge:obligation:eu:gdpr-art-21-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-21-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-21-controller~explained_by~derivation:obligation:eu:gdpr-art-21-controller:duty", "from": "obligation:eu:gdpr-art-21-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-21-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-21-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-21-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-21-controller~explained_by~derivation:obligation:eu:gdpr-art-21-controller:deadline", "from": "obligation:eu:gdpr-art-21-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-21-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-21-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-21-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-21-controller~explained_by~derivation:obligation:eu:gdpr-art-21-controller:sanctions", "from": "obligation:eu:gdpr-art-21-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-21-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-21-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-21-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-21-controller~anchored_in~provision:eu:gdpr:21", "from": "obligation:eu:gdpr-art-21-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:21", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:21~verified_by_judgment~judgment:eu:62023CJ0394", "from": "provision:eu:gdpr:21", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0394", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0394" }, { "id": "edge:provision:eu:gdpr:21~verified_by_judgment~judgment:eu:62022CJ0061", "from": "provision:eu:gdpr:21", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0061", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0061" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2022-021", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046650733" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2022-020", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2022-017", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-017", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046198070" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2022-011", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-011", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045975295" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2021-021", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-021", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044810599" }, { "id": "edge:provision:eu:gdpr:21~verified_by_enforcement~enforcement:fr:cnil:san-2019-010", "from": "provision:eu:gdpr:21", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2019-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000039419459" }, { "id": "edge:obligation:eu:gdpr-art-22-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-22-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-22-controller~explained_by~derivation:obligation:eu:gdpr-art-22-controller:duty", "from": "obligation:eu:gdpr-art-22-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-22-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-22-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-22-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-22-controller~explained_by~derivation:obligation:eu:gdpr-art-22-controller:deadline", "from": "obligation:eu:gdpr-art-22-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-22-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-22-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-22-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-22-controller~explained_by~derivation:obligation:eu:gdpr-art-22-controller:sanctions", "from": "obligation:eu:gdpr-art-22-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-22-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-22-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-22-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-22-controller~anchored_in~provision:eu:gdpr:22", "from": "obligation:eu:gdpr-art-22-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:22", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:22~verified_by_judgment~judgment:eu:62021CJ0634", "from": "provision:eu:gdpr:22", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0634", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0634" }, { "id": "edge:obligation:eu:gdpr-art-26-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-26-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-26-controller~explained_by~derivation:obligation:eu:gdpr-art-26-controller:duty", "from": "obligation:eu:gdpr-art-26-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-26-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-26-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-26-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-26-controller~explained_by~derivation:obligation:eu:gdpr-art-26-controller:deadline", "from": "obligation:eu:gdpr-art-26-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-26-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-26-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-26-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-26-controller~explained_by~derivation:obligation:eu:gdpr-art-26-controller:sanctions", "from": "obligation:eu:gdpr-art-26-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-26-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-26-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-26-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-26-controller~anchored_in~provision:eu:gdpr:26", "from": "obligation:eu:gdpr-art-26-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:26", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:26~verified_by_judgment~judgment:eu:62023CJ0492", "from": "provision:eu:gdpr:26", "relation": "verified_by_judgment", "to": "judgment:eu:62023CJ0492", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0492" }, { "id": "edge:provision:eu:gdpr:26~verified_by_judgment~judgment:eu:62022CJ0604", "from": "provision:eu:gdpr:26", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0604", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0604" }, { "id": "edge:provision:eu:gdpr:26~verified_by_judgment~judgment:eu:62021CJ0683", "from": "provision:eu:gdpr:26", "relation": "verified_by_judgment", "to": "judgment:eu:62021CJ0683", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0683" }, { "id": "edge:provision:eu:gdpr:26~verified_by_judgment~judgment:eu:62022CJ0060", "from": "provision:eu:gdpr:26", "relation": "verified_by_judgment", "to": "judgment:eu:62022CJ0060", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0060" }, { "id": "edge:provision:eu:gdpr:26~verified_by_enforcement~enforcement:fr:cnil:san-2026-003", "from": "provision:eu:gdpr:26", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-003", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671" }, { "id": "edge:provision:eu:gdpr:26~verified_by_enforcement~enforcement:fr:cnil:san-2023-016", "from": "provision:eu:gdpr:26", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-016", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048388493" }, { "id": "edge:provision:eu:gdpr:26~verified_by_enforcement~enforcement:fr:cnil:san-2023-009", "from": "provision:eu:gdpr:26", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063" }, { "id": "edge:provision:eu:gdpr:26~verified_by_enforcement~enforcement:fr:cnil:san-2023-006", "from": "provision:eu:gdpr:26", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-006", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047552103" }, { "id": "edge:obligation:eu:gdpr-art-27-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-27-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-27-controller~explained_by~derivation:obligation:eu:gdpr-art-27-controller:duty", "from": "obligation:eu:gdpr-art-27-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-27-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-27-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-27-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-27-controller~explained_by~derivation:obligation:eu:gdpr-art-27-controller:deadline", "from": "obligation:eu:gdpr-art-27-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-27-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-27-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-27-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-27-controller~explained_by~derivation:obligation:eu:gdpr-art-27-controller:sanctions", "from": "obligation:eu:gdpr-art-27-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-27-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-27-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-27-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-27-controller~anchored_in~provision:eu:gdpr:27", "from": "obligation:eu:gdpr-art-27-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:27", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:27~verified_by_enforcement~enforcement:fr:cnil:san-2022-020", "from": "provision:eu:gdpr:27", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046562676" }, { "id": "edge:obligation:eu:gdpr-art-31-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-31-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-31-controller~explained_by~derivation:obligation:eu:gdpr-art-31-controller:duty", "from": "obligation:eu:gdpr-art-31-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-31-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-31-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-31-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-31-controller~explained_by~derivation:obligation:eu:gdpr-art-31-controller:deadline", "from": "obligation:eu:gdpr-art-31-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-31-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-31-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-31-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-31-controller~explained_by~derivation:obligation:eu:gdpr-art-31-controller:sanctions", "from": "obligation:eu:gdpr-art-31-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-31-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-31-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-31-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-31-controller~anchored_in~provision:eu:gdpr:31", "from": "obligation:eu:gdpr-art-31-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:31", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2026-010", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054810440" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2023-018", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-018", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048580096" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2023-013", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-013", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048110233" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2022-019", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-019", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046444859" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2021-014", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045" }, { "id": "edge:provision:eu:gdpr:31~verified_by_enforcement~enforcement:fr:cnil:san-2019-010", "from": "provision:eu:gdpr:31", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2019-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000039419459" }, { "id": "edge:obligation:eu:gdpr-art-34-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-34-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-34-controller~explained_by~derivation:obligation:eu:gdpr-art-34-controller:duty", "from": "obligation:eu:gdpr-art-34-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-34-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-34-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-34-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-34-controller~explained_by~derivation:obligation:eu:gdpr-art-34-controller:deadline", "from": "obligation:eu:gdpr-art-34-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-34-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-34-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-34-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-34-controller~explained_by~derivation:obligation:eu:gdpr-art-34-controller:sanctions", "from": "obligation:eu:gdpr-art-34-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-34-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-34-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-34-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-34-controller~anchored_in~provision:eu:gdpr:34", "from": "obligation:eu:gdpr-art-34-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:34", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-2026-008", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054136834" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-026-001", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-2026-001", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-001", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352594" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-2026-002", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053352643" }, { "id": "edge:provision:eu:gdpr:34~verified_by_enforcement~enforcement:fr:cnil:san-2021-020", "from": "provision:eu:gdpr:34", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044609709" }, { "id": "edge:obligation:eu:gdpr-art-36-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-36-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-36-controller~explained_by~derivation:obligation:eu:gdpr-art-36-controller:duty", "from": "obligation:eu:gdpr-art-36-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-36-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-36-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-36-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-36-controller~explained_by~derivation:obligation:eu:gdpr-art-36-controller:deadline", "from": "obligation:eu:gdpr-art-36-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-36-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-36-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-36-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-36-controller~explained_by~derivation:obligation:eu:gdpr-art-36-controller:sanctions", "from": "obligation:eu:gdpr-art-36-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-36-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-36-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-36-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-37-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-37-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-37-controller~explained_by~derivation:obligation:eu:gdpr-art-37-controller:duty", "from": "obligation:eu:gdpr-art-37-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-37-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-37-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-37-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-37-controller~explained_by~derivation:obligation:eu:gdpr-art-37-controller:deadline", "from": "obligation:eu:gdpr-art-37-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-37-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-37-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-37-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-37-controller~explained_by~derivation:obligation:eu:gdpr-art-37-controller:sanctions", "from": "obligation:eu:gdpr-art-37-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-37-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-37-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-37-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-controller~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-44-controller", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-controller~explained_by~derivation:obligation:eu:gdpr-art-44-controller:duty", "from": "obligation:eu:gdpr-art-44-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-controller:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-controller:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-controller:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-controller~explained_by~derivation:obligation:eu:gdpr-art-44-controller:deadline", "from": "obligation:eu:gdpr-art-44-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-controller:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-controller:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-controller:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-controller~explained_by~derivation:obligation:eu:gdpr-art-44-controller:sanctions", "from": "obligation:eu:gdpr-art-44-controller", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-controller:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-controller:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-controller:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-controller~anchored_in~provision:eu:gdpr:44", "from": "obligation:eu:gdpr-art-44-controller", "relation": "anchored_in", "to": "provision:eu:gdpr:44", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:44~verified_by_enforcement~enforcement:fr:cnil:san-2019-010", "from": "provision:eu:gdpr:44", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2019-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000039419459" }, { "id": "edge:obligation:eu:gdpr-art-28-2-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-28-2-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-2-processor~explained_by~derivation:obligation:eu:gdpr-art-28-2-processor:duty", "from": "obligation:eu:gdpr-art-28-2-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-2-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-2-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-2-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-2-processor~explained_by~derivation:obligation:eu:gdpr-art-28-2-processor:deadline", "from": "obligation:eu:gdpr-art-28-2-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-2-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-2-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-2-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-2-processor~explained_by~derivation:obligation:eu:gdpr-art-28-2-processor:sanctions", "from": "obligation:eu:gdpr-art-28-2-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-28-2-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-28-2-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-28-2-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-28-2-processor~anchored_in~provision:eu:gdpr:28", "from": "obligation:eu:gdpr-art-28-2-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:28", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2025-014", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053048614" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2024-002", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2024-002", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049128617" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2023-015", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-015", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048222771" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2023-008", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-008", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047682157" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2022-009", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2022-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000045614368" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2021-020", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-020", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044609709" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2021-012", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-012", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000043860997" }, { "id": "edge:provision:eu:gdpr:28~verified_by_enforcement~enforcement:fr:cnil:san-2020-016", "from": "provision:eu:gdpr:28", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2020-016", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042774286" }, { "id": "edge:obligation:eu:gdpr-art-30-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-30-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-processor~explained_by~derivation:obligation:eu:gdpr-art-30-processor:duty", "from": "obligation:eu:gdpr-art-30-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-processor~explained_by~derivation:obligation:eu:gdpr-art-30-processor:deadline", "from": "obligation:eu:gdpr-art-30-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-processor~explained_by~derivation:obligation:eu:gdpr-art-30-processor:sanctions", "from": "obligation:eu:gdpr-art-30-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-30-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-30-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-30-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-30-processor~anchored_in~provision:eu:gdpr:30", "from": "obligation:eu:gdpr-art-30-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:30", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2026-009", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2026-009", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000054790100" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2025-014", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2025-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053048614" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2023-025", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2023-025", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000049051422" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2021-019", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-019", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044286815" }, { "id": "edge:provision:eu:gdpr:30~verified_by_enforcement~enforcement:fr:cnil:san-2021-014", "from": "provision:eu:gdpr:30", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2021-014", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000044043045" }, { "id": "edge:obligation:eu:gdpr-art-44-processor~derived_from~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "obligation:eu:gdpr-art-44-processor", "relation": "derived_from", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-processor~explained_by~derivation:obligation:eu:gdpr-art-44-processor:duty", "from": "obligation:eu:gdpr-art-44-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-processor:duty", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-processor:duty~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-processor:duty", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-processor~explained_by~derivation:obligation:eu:gdpr-art-44-processor:deadline", "from": "obligation:eu:gdpr-art-44-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-processor:deadline", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-processor:deadline~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-processor:deadline", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-processor~explained_by~derivation:obligation:eu:gdpr-art-44-processor:sanctions", "from": "obligation:eu:gdpr-art-44-processor", "relation": "explained_by", "to": "derivation:obligation:eu:gdpr-art-44-processor:sanctions", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:derivation:obligation:eu:gdpr-art-44-processor:sanctions~grounded_in~source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "from": "derivation:obligation:eu:gdpr-art-44-processor:sanctions", "relation": "grounded_in", "to": "source:https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:obligation:eu:gdpr-art-44-processor~anchored_in~provision:eu:gdpr:44", "from": "obligation:eu:gdpr-art-44-processor", "relation": "anchored_in", "to": "provision:eu:gdpr:44", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, { "id": "edge:provision:eu:gdpr:44~verified_by_enforcement~enforcement:fr:cnil:san-2019-010", "from": "provision:eu:gdpr:44", "relation": "verified_by_enforcement", "to": "enforcement:fr:cnil:san-2019-010", "source_url": "https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000039419459" } ], "question": "Why is this true?", "audience": "boards", "audit_trail": { "read_at": "2026-08-31", "hash_method": "sha256 over the canonical core of this object; history in the change feed", "change_feed": "https://legal.exploreworldai.com/api/public/v1/objects/changes", "chain_hash_formula": "SHA-256(prev_hash|position|type|hash_before|hash_after|canonical)" }, "reviewed_share": 0.26, "verification_sources": 298, "gaps": [ { "conclusion": "obligation:eu:gdpr-art-5-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-6-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-12-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-15-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-17-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-7-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-8-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-9-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-13-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-14-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-16-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-18-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-19-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-20-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-21-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-22-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-26-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-27-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-31-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-34-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-36-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-37-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-44-controller", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-28-2-processor", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-30-processor", "missing": "internal_legal_review" }, { "conclusion": "obligation:eu:gdpr-art-44-processor", "missing": "internal_legal_review" } ], "counts": { "nodes": 275, "edges": 576, "sourced_edges": 576 }, "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu%3Agdpr", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu%3Agdpr", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu%3Agdpr" }, "graph_hash": "sha256:08d66fd3c83815c121931658f452e0a8b5acef1c1417a91710106c7c1010d773", "source": "Source: NovaCopilot", "hash": "sha256:4d03b0758ea2c07087a0e1da366b43f6659ba369bce6e3afb434bcce771e27c9", "version": "legal-2026-10-09", "expires": "2026-10-13T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-09+legal-2026-10-09+2026-10-09T21:48:48", "content_hash": "sha256:4d03b0758ea2c07087a0e1da366b43f6659ba369bce6e3afb434bcce771e27c9", "revalidate_after": "2026-10-10T09:49:08.591Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:gdpr", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }