{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-23",
    "fingerprint": "ewai:se:7839bf",
    "proof": "sha256:f1cd93c0aa95a3d8e8d30b2be1ac6a47ce3d71e647dd4485fc7fcaa8c42662d9",
    "jurisdiction": "se",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "decision",
  "object_id": "decision:eu:c-307-22",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/decision",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22",
  "judgment": {
    "id": "eu:c-307-22",
    "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-307-22"
  },
  "siblings": {
    "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-307-22",
    "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-307-22",
    "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-307-22",
    "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-307-22",
    "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-307-22",
    "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-307-22",
    "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-307-22",
    "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-307-22",
    "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-307-22",
    "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-307-22",
    "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-307-22",
    "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-307-22"
  },
  "source": "NovaCopilot",
  "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-307-22",
  "item": {
    "judgment": "eu:c-307-22",
    "issue": "Reference for a preliminary ruling – Processing of personal data – Regulation (EU) 2016/679 – Articles 12, 15 and 23 – Data subject’s right of access to his or her data undergoing processing – Right to obtain a first copy of those data free of charge – Processing of a patient’s data by his or her medical practitioner – Medical records – Reasons for the request for access – Use of data for the purpose of triggering the liability of the person providing treatment – Concept of ‘copy’.",
    "decisions": [
      {
        "decision_id": "decision:eu:c-307-22#1",
        "precedent_id": "precedent:eu:c-307-22#1",
        "paragraph_id": "para_263",
        "outcome": "interpretation",
        "then": "Article 12(5) and Article 15(1) and (3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as meaning that the controller is under an obligation to provide the data subject, free of charge, with a first copy of his or her personal data undergoing processing, even, such a possibility does not permit the adoption of a piece of national legislation",
        "conditions": [
          {
            "text": "where the reason for that request is not related to those referred to in the first sentence of recital 63 of that regulation. must be interpreted as meaning that a piece of national legislation adopted prior to the entry into force of that regulation is capable of falling within the scope of that provision. However",
            "elements": []
          }
        ],
        "exceptions": [],
        "elements": [
          "element:gdpr:personal-data",
          "element:gdpr:processing",
          "element:gdpr:controller"
        ],
        "open": []
      },
      {
        "decision_id": "decision:eu:c-307-22#4",
        "precedent_id": "precedent:eu:c-307-22#4",
        "paragraph_id": "para_269",
        "outcome": "interpretation",
        "then": "The first sentence of Article 15(3) of Regulation 2016/679 must be interpreted as meaning that, in the context of a doctor-patient relationship, the right to obtain a copy of personal data undergoing processing means that the data subject must be given a faithful and intelligible reproduction of all those data. That right entails the right to obtain a full copy of the documents included in his or her medical records and containing, inter alia, those data, as well as to ensure they are intelligible. Regarding data relating to the health of the data subject, that right includes in any event the ",
        "conditions": [
          {
            "text": "if the provision of such a copy is essential in order to enable the data subject to verify how accurate and exhaustive those data are",
            "elements": []
          }
        ],
        "exceptions": [],
        "elements": [
          "element:gdpr:personal-data"
        ],
        "open": []
      }
    ],
    "text_sha256": "b9ed132def96cc5e93c9d5ad784677319519c503492b203d30f69ee6d52d74b4",
    "method": "Rättsregeln delas i utfall, villkor (where, if, when, provided that) och undantag (unless, except where) med fasta regler.",
    "graph": {
      "graph_version": "1",
      "path": "topic → obligation → decision → sanction → compliance",
      "relations": [
        {
          "from": "obligation:eu:gdpr-art-24-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-24-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#1",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-58-2",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-24-controller"
            ]
          }
        },
        {
          "from": "sanction:eu:gdpr-art-58-2",
          "relation": "assessed_in",
          "to": "compliance:gdpr:controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-24-controller"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-25-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-25-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-25-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#1",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-83-4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-4",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-25-controller"
            ]
          }
        },
        {
          "from": "sanction:eu:gdpr-art-83-4",
          "relation": "assessed_in",
          "to": "compliance:gdpr:controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-25-controller"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-30-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-30-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-30-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-32-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-32-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-33-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-33-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-35-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-35-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-35-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-28-processor",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-28-processor",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-28-processor",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "sanction:eu:gdpr-art-83-4",
          "relation": "assessed_in",
          "to": "compliance:gdpr:processor",
          "url": "https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-28-processor"
            ]
          }
        },
        {
          "from": "sanction:eu:gdpr-art-58-2",
          "relation": "assessed_in",
          "to": "compliance:gdpr:processor",
          "url": "https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-28-processor"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-32-processor",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-processor",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-32-processor",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-33-processor",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-processor",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-33-processor",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-5-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-5-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing",
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-5-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#1",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-83-5",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-5-controller"
            ]
          }
        },
        {
          "from": "sanction:eu:gdpr-art-83-5",
          "relation": "assessed_in",
          "to": "compliance:gdpr:controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-5-controller"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-6-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-6-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing",
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-6-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-12-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-12-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-15-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-15-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-15-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-17-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-17-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-17-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-7-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-7-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-7-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-8-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-8-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:processing"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-8-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-13-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-13-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-13-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-14-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-14-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-14-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-34-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#1",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-34-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data",
              "element:gdpr:controller"
            ]
          }
        },
        {
          "from": "topic:se:dataskydd",
          "relation": "frames",
          "to": "obligation:eu:gdpr-art-34-controller",
          "url": "https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se",
          "basis": {
            "type": "curated_act_topic",
            "refs": [
              "gdpr",
              "https://legal.exploreworldai.com/en/amnen/dataskydd"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-32-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#4",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-83-4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-4",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-32-controller"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#4",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-58-2",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-32-controller"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-33-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-32-processor",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-processor",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-33-processor",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-processor",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-5-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-5-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "decision:eu:c-307-22#4",
          "relation": "exposes_to",
          "to": "sanction:eu:gdpr-art-83-5",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5",
          "basis": {
            "type": "obligation_coverage",
            "refs": [
              "obligation:eu:gdpr-art-5-controller"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-6-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-6-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-12-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-15-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-15-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-17-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-17-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-13-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-13-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-14-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-14-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        },
        {
          "from": "obligation:eu:gdpr-art-34-controller",
          "relation": "interpreted_by",
          "to": "decision:eu:c-307-22#4",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-34-controller",
          "basis": {
            "type": "shared_element",
            "refs": [
              "element:gdpr:personal-data"
            ]
          }
        }
      ],
      "open": [],
      "method": "Deterministisk koppling via permanenta rekvisit-ID:n, registrets rättsakts-ID:n och en kuraterad rättsakt-till-ämne-tabell. Inga relationer skapas med fritextgissning."
    },
    "limits": [],
    "hash": "ee0e8cd68ef0812bd9098821db6a414e317a3f838bb69290770458fa9ea6da9b"
  },
  "links": {
    "provisions": null,
    "case_law": {
      "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-307-22",
      "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-307-22",
      "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-307-22",
      "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-307-22"
    },
    "evidence": {
      "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-307-22",
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22?view=compact",
    "representations": {
      "sv": "https://legal.exploreworldai.com/eu/praxis/c-307-22",
      "en": "https://legal.exploreworldai.com/en/eu/praxis/c-307-22"
    },
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:c-307-22"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "metadata": {
    "schema": "novacopilot_object_metadata/1",
    "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22",
    "source": "Source: NovaCopilot",
    "official_source": null,
    "short_answer": null,
    "short_answer_status": "not_in_register",
    "hash": "ee0e8cd68ef0812bd9098821db6a414e317a3f838bb69290770458fa9ea6da9b",
    "schema_version": "1",
    "last_verified_at": null,
    "verification_status": "not_verified_yet",
    "integrity_check_scope": "stored_content_only"
  },
  "hash": "sha256:f1cd93c0aa95a3d8e8d30b2be1ac6a47ce3d71e647dd4485fc7fcaa8c42662d9",
  "version": "legal-2026-10-23",
  "expires": "2026-10-25T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-23+legal-2026-10-23+2026-10-23T14:34:08",
    "content_hash": "sha256:f1cd93c0aa95a3d8e8d30b2be1ac6a47ce3d71e647dd4485fc7fcaa8c42662d9",
    "revalidate_after": "2026-10-24T03:28:29.339Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-307-22",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}