{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-08",
    "fingerprint": "ewai:se:6d0191",
    "proof": "sha256:a78d2ffffc0ac977087b5b077df293b978f50ed14c41fc95846a76a88364b125",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "compliance_effect",
  "object_id": "compliance_effect:eu:gdpr-art-12-controller",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/compliance_effect",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller",
  "source": "NovaCopilot",
  "item": {
    "obligation": "obligation:eu:gdpr-art-12-controller",
    "who": "controller",
    "must_do": "Provide information on action taken on a data subject request under Articles 15 to 22 without undue delay and in any event within one month of receipt of the request.",
    "deadline": "30 days",
    "deadline_note": "Within one month of receipt of the request; may be extended by two further months where necessary, taking into account the complexity and number of the requests, with the data subject informed within one month (Art. 12(3)).",
    "report_to": "Data subject",
    "triggered_by": [
      "element:gdpr:personal-data",
      "element:gdpr:controller"
    ],
    "if_not": [
      {
        "sanction_id": "sanction:eu:gdpr-art-83-5",
        "type": "administrative_fine",
        "max_amount": "EUR 20 000 000",
        "max_turnover_pct": 4
      },
      {
        "sanction_id": "sanction:eu:gdpr-art-58-2",
        "type": "corrective_order",
        "max_amount": null,
        "max_turnover_pct": null
      }
    ],
    "source": "Regulation (EU) 2016/679 (GDPR)",
    "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
    "gaps": [],
    "links": {
      "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller",
      "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr--controller",
      "exceptions": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr-art-12-controller",
      "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr",
      "sanctions": [
        "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5",
        "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2"
      ]
    },
    "hash": "b2192a586fdd137edf0536b22d3f4ddb48ca59a8e580bfc7c6235cb73ce87985"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr-art-12-controller",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr-art-12-controller",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr-art-12-controller"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:gdpr-art-12-controller"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:a78d2ffffc0ac977087b5b077df293b978f50ed14c41fc95846a76a88364b125",
  "version": "legal-2026-10-08",
  "expires": "2026-10-09T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-08+legal-2026-10-08+2026-10-08T12:42:41",
    "content_hash": "sha256:a78d2ffffc0ac977087b5b077df293b978f50ed14c41fc95846a76a88364b125",
    "revalidate_after": "2026-10-08T14:09:53.892Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}