{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-13",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-13)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-09",
    "fingerprint": "ewai:se:73f7f1",
    "proof": "sha256:08923fa3eaf8a0193a04e7f6a4832a06e48ee5a46f215373bca0e0a6d77d4430",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "action_kit",
  "object_id": "action_kit:eu:gdpr--art-13",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/action_kit",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-13",
  "source": "NovaCopilot",
  "item": {
    "coverage": {
      "complete": 5,
      "total": 5,
      "label": "5 of 5 answers ready"
    },
    "subject": "eu:gdpr--art-13",
    "act": "gdpr",
    "article": "13",
    "actions": [
      {
        "obligation": "obligation:eu:gdpr-art-13-controller",
        "verification": "internal_review",
        "sanctions": [
          "sanction:eu:gdpr-art-58-2",
          "sanction:eu:gdpr-art-83-5"
        ]
      }
    ],
    "answers": [
      {
        "key": "what_to_do",
        "status": "ready",
        "sha256": "cb809a421493bf893c2c62ca78543539e6efb061c6aa02691e346177cb284766"
      },
      {
        "key": "who",
        "status": "ready",
        "sha256": "1b248d517151fe26010a24b39b3686d2a1aaabb3fec4fb6e5ad53d056fadb41f"
      },
      {
        "key": "verification",
        "status": "ready",
        "sha256": "f9a212e9153734f77377710afaa446fe1b46e8b1ce9cb89a2d95ab4d7871414f"
      },
      {
        "key": "documents",
        "status": "ready",
        "sha256": "0a4c4a84fff44472b32f33c593b04d9e8146d95fa02e69f447337ca17f2848e4"
      },
      {
        "key": "if_not_met",
        "status": "ready",
        "sha256": "e7663acd166ef31a8787531bcd6fb1d31b8b04ab10fc9215f519c7fcaf4218b0"
      }
    ],
    "answers_full": [
      {
        "key": "what_to_do",
        "status": "ready",
        "answer": "Give the data subject the information listed in Article 13, including identity, purposes, legal basis, recipients, transfers, retention period and rights, when personal data are obtained from the data subject.",
        "ids": [
          "obligation:eu:gdpr-art-13-controller"
        ],
        "question": "What must I do?",
        "sha256": "cb809a421493bf893c2c62ca78543539e6efb061c6aa02691e346177cb284766"
      },
      {
        "key": "who",
        "status": "ready",
        "answer": "Responsible roles: controller.",
        "ids": [
          "obligation:eu:gdpr-art-13-controller"
        ],
        "question": "Who is responsible?",
        "sha256": "1b248d517151fe26010a24b39b3686d2a1aaabb3fec4fb6e5ad53d056fadb41f"
      },
      {
        "key": "verification",
        "status": "ready",
        "answer": "Verified by: internal_review. Internal review against the duty text.",
        "ids": [
          "verification:internal_review"
        ],
        "question": "How is this verified?",
        "sha256": "f9a212e9153734f77377710afaa446fe1b46e8b1ce9cb89a2d95ab4d7871414f"
      },
      {
        "key": "documents",
        "status": "ready",
        "answer": "Keep: Dated internal compliance note.",
        "ids": [
          "documentation_requirement:eu:gdpr--art-13"
        ],
        "question": "Which documents are required?",
        "sha256": "0a4c4a84fff44472b32f33c593b04d9e8146d95fa02e69f447337ca17f2848e4"
      },
      {
        "key": "if_not_met",
        "status": "ready",
        "answer": "2 sanctions, up to 4 % of turnover; e.g. EUR 20 000 000.",
        "ids": [
          "sanction:eu:gdpr-art-58-2",
          "sanction:eu:gdpr-art-83-5"
        ],
        "question": "What happens if the requirement is not met?",
        "sha256": "e7663acd166ef31a8787531bcd6fb1d31b8b04ab10fc9215f519c7fcaf4218b0"
      }
    ],
    "action_list": [
      {
        "obligation": "obligation:eu:gdpr-art-13-controller",
        "provision": "gdpr art. 13",
        "role": "controller",
        "action": "Give the data subject the information listed in Article 13, including identity, purposes, legal basis, recipients, transfers, retention period and rights, when personal data are obtained from the data subject.",
        "deadline": "At the time when the personal data are obtained.",
        "recipient": "Data subject",
        "verification": "internal_review",
        "verification_method": "Internal review against the duty text.",
        "evidence": [
          "Dated internal compliance note"
        ],
        "exceptions": [
          "exception:eu:gdpr-household"
        ],
        "sanctions": [
          "sanction:eu:gdpr-art-58-2",
          "sanction:eu:gdpr-art-83-5"
        ],
        "related_rules": [
          "obligation:eu:ai-act-art-16-provider",
          "obligation:eu:ai-act-art-9-provider",
          "obligation:eu:ai-act-art-17-provider",
          "obligation:eu:ai-act-art-72-provider",
          "obligation:eu:ai-act-art-26-deployer"
        ],
        "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
      }
    ],
    "checklist": [
      {
        "step": 1,
        "role": "controller",
        "do": "Give the data subject the information listed in Article 13, including identity, purposes, legal basis, recipients, transfers, retention period and rights, when personal data are obtained from the data subject.",
        "verify": "Internal review against the duty text.",
        "keep": [
          "Dated internal compliance note"
        ],
        "deadline": "At the time when the personal data are obtained.",
        "if_not": [
          "sanction:eu:gdpr-art-58-2",
          "sanction:eu:gdpr-art-83-5"
        ],
        "done": false
      }
    ],
    "links": {
      "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:gdpr--art-13",
      "act_kit": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr",
      "articles": [],
      "risk": [
        "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr--controller"
      ],
      "timeline": [
        "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr-art-13-controller"
      ],
      "list": "https://legal.exploreworldai.com/api/public/v1/action-kits"
    },
    "method": "Rule to action: five fixed agent questions from deterministic registers. Verification and evidence come from fixed keyword rules on the duty text. No model writes anything.",
    "attribution": "Source: NovaCopilot",
    "hash": "239b0ac6ef848fad8f7703a40c17fe516cdddafb53678ab8e6df132c38a1d695"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr--art-13",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr--art-13",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr--art-13"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-13?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:gdpr--art-13"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:08923fa3eaf8a0193a04e7f6a4832a06e48ee5a46f215373bca0e0a6d77d4430",
  "version": "legal-2026-10-09",
  "expires": "2026-10-10T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-09+legal-2026-10-09+2026-10-09T20:29:16",
    "content_hash": "sha256:08923fa3eaf8a0193a04e7f6a4832a06e48ee5a46f215373bca0e0a6d77d4430",
    "revalidate_after": "2026-10-09T22:13:18.445Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-13",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}