{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-5", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-5)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-07", "fingerprint": "ewai:se:1a3254", "proof": "sha256:ae54a0167f5575e2a5cac87b9342ac96dcda7c5f9bcd64b6ef861c1d45f213f9", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "object_type": "action_kit", "object_id": "action_kit:eu:gdpr--art-5", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/action_kit", "url": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-5", "judgment": { "id": "eu:gdpr--art-5", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:gdpr--art-5" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:gdpr--art-5", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:gdpr--art-5", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:gdpr--art-5", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:gdpr--art-5", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:gdpr--art-5", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:gdpr--art-5", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:gdpr--art-5", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:gdpr--art-5", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:gdpr--art-5", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:gdpr--art-5", "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr--art-5", "sanction": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr--art-5", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:gdpr--art-5", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:gdpr--art-5", "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr--art-5", "provision_link": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr--art-5", "brief": "https://legal.exploreworldai.com/api/public/v1/obj/brief/eu:gdpr--art-5", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:gdpr--art-5", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr--art-5", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr--art-5", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr--art-5", "answer_node": "https://legal.exploreworldai.com/api/public/v1/obj/answer_node/eu:gdpr--art-5", "exception": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr--art-5", "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr--art-5", "package": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr--art-5", "case_kit": "https://legal.exploreworldai.com/api/public/v1/obj/case_kit/eu:gdpr--art-5", "documentation_requirement": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:gdpr--art-5", "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:gdpr--art-5" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:gdpr--art-5", "item": { "coverage": { "complete": 5, "total": 5, "label": "5 of 5 answers ready" }, "subject": "eu:gdpr--art-5", "act": "gdpr", "article": "5", "actions": [ { "obligation": "obligation:eu:gdpr-art-5-controller", "verification": "internal_review", "sanctions": [ "sanction:eu:gdpr-art-58-2", "sanction:eu:gdpr-art-83-5" ] } ], "answers": [ { "key": "what_to_do", "status": "ready", "sha256": "53e9b5f4042987985b5a115ee3f3a306ef6a184b40e20e3bd7239ce0e9a68c16" }, { "key": "who", "status": "ready", "sha256": "dfced0950a884d4d3a2d8f10d68403f9fd1fd636366841b4baf36bb21a8bffe9" }, { "key": "verification", "status": "ready", "sha256": "f9a212e9153734f77377710afaa446fe1b46e8b1ce9cb89a2d95ab4d7871414f" }, { "key": "documents", "status": "ready", "sha256": "f59359292de26a0ce87f342230fcec031f942fb3eac9901ee8f0c759d7db9735" }, { "key": "if_not_met", "status": "ready", "sha256": "e7663acd166ef31a8787531bcd6fb1d31b8b04ab10fc9215f519c7fcaf4218b0" } ], "answers_full": [ { "key": "what_to_do", "status": "ready", "answer": "Process personal data in line with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and be able to demonstrate compliance (accountability).", "ids": [ "obligation:eu:gdpr-art-5-controller" ], "question": "What must I do?", "sha256": "53e9b5f4042987985b5a115ee3f3a306ef6a184b40e20e3bd7239ce0e9a68c16" }, { "key": "who", "status": "ready", "answer": "Responsible roles: controller.", "ids": [ "obligation:eu:gdpr-art-5-controller" ], "question": "Who is responsible?", "sha256": "dfced0950a884d4d3a2d8f10d68403f9fd1fd636366841b4baf36bb21a8bffe9" }, { "key": "verification", "status": "ready", "answer": "Verified by: internal_review. Internal review against the duty text.", "ids": [ "verification:internal_review" ], "question": "How is this verified?", "sha256": "f9a212e9153734f77377710afaa446fe1b46e8b1ce9cb89a2d95ab4d7871414f" }, { "key": "documents", "status": "ready", "answer": "Keep: Dated internal compliance note.", "ids": [ "documentation_requirement:eu:gdpr--art-5" ], "question": "Which documents are required?", "sha256": "f59359292de26a0ce87f342230fcec031f942fb3eac9901ee8f0c759d7db9735" }, { "key": "if_not_met", "status": "ready", "answer": "2 sanctions, up to 4 % of turnover; e.g. EUR 20 000 000.", "ids": [ "sanction:eu:gdpr-art-58-2", "sanction:eu:gdpr-art-83-5" ], "question": "What happens if the requirement is not met?", "sha256": "e7663acd166ef31a8787531bcd6fb1d31b8b04ab10fc9215f519c7fcaf4218b0" } ], "action_list": [ { "obligation": "obligation:eu:gdpr-art-5-controller", "provision": "gdpr art. 5", "role": "controller", "action": "Process personal data in line with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and be able to demonstrate compliance (accountability).", "deadline": null, "recipient": null, "verification": "internal_review", "verification_method": "Internal review against the duty text.", "evidence": [ "Dated internal compliance note" ], "exceptions": [ "exception:eu:gdpr-household" ], "sanctions": [ "sanction:eu:gdpr-art-58-2", "sanction:eu:gdpr-art-83-5" ], "related_rules": [ "obligation:eu:ai-act-art-16-provider", "obligation:eu:ai-act-art-9-provider", "obligation:eu:ai-act-art-17-provider", "obligation:eu:ai-act-art-72-provider", "obligation:eu:ai-act-art-26-deployer" ], "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" } ], "checklist": [ { "step": 1, "role": "controller", "do": "Process personal data in line with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and be able to demonstrate compliance (accountability).", "verify": "Internal review against the duty text.", "keep": [ "Dated internal compliance note" ], "deadline": null, "if_not": [ "sanction:eu:gdpr-art-58-2", "sanction:eu:gdpr-art-83-5" ], "done": false } ], "links": { "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:gdpr--art-5", "act_kit": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr", "articles": [], "risk": [ "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr--controller" ], "timeline": [ "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr-art-5-controller" ], "list": "https://legal.exploreworldai.com/api/public/v1/action-kits" }, "method": "Rule to action: five fixed agent questions from deterministic registers. Verification and evidence come from fixed keyword rules on the duty text. No model writes anything.", "attribution": "Source: NovaCopilot", "hash": "980655b4c332c9ea4321b63ac0b12426138b8cd53b18494fac57a81041259839" }, "links": { "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr--art-5", "case_law": { "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr--art-5", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr--art-5" }, "evidence": { "provenance": null, "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-5?view=compact", "representations": {}, "machine_languages": [ "en", "sv" ], "ref": "eu:gdpr--art-5" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:ae54a0167f5575e2a5cac87b9342ac96dcda7c5f9bcd64b6ef861c1d45f213f9", "version": "legal-2026-10-07", "expires": "2026-10-08T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-07+legal-2026-10-07+2026-10-07T08:23:33", "content_hash": "sha256:ae54a0167f5575e2a5cac87b9342ac96dcda7c5f9bcd64b6ef861c1d45f213f9", "revalidate_after": "2026-10-07T11:20:21.615Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr--art-5", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }