{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-03","fingerprint":"ewai:se:cf9e2d","proof":"sha256:f6627c60107ad0696ef8930cf40f67526e967780b89d2d18de1749557d0ac7c4","jurisdiction":"se","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","object_type":"decision","object_id":"decision:eu:c-659-22","schema_version":"1","schema":"https://legal.exploreworldai.com/api/public/v1/schemas/decision","url":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22","judgment":{"id":"eu:c-659-22","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-659-22"},"siblings":{"risk":"https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-659-22","relation":"https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-659-22","change":"https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-659-22","agent":"https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-659-22","provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-659-22","status":"https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-659-22","precedent":"https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-659-22","edge":"https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-659-22","element":"https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-659-22","weight":"https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-659-22","conflict":"https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-659-22","citation_graph":"https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-659-22"},"source":"NovaCopilot","precedent_graph":"https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-659-22","item":{"judgment":"eu:c-659-22","issue":"Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 4(2) – Concept of ‘processing’ of personal data – Mobile application – Verification of the validity of ‘EU Digital COVID Certificates’ issued pursuant to Regulation (EU) 2021/953.","decisions":[{"decision_id":"decision:eu:c-659-22#1","precedent_id":"precedent:eu:c-659-22#1","paragraph_id":"para_117","outcome":"holding","then":"The concept of ‘processing’ personal data referred to in Article 4(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) must be interpreted as including the verification, using a national mobile application, of the validity of interoperable COVID-19 vaccination, test and recovery certificates issued pursuant to Regulation (EU) 2021/953 of the European Parliament a","conditions":[],"exceptions":[],"elements":["element:gdpr:personal-data","element:gdpr:processing"],"open":["Inga uttryckliga villkor i rättsregeln; regeln gäller i den situation domen avser."]}],"text_sha256":"9ace8b900ca5ca2f784a29f61d3f7c2d3ea5c37dc74c82d43d5cd5827cdaeec3","method":"Rättsregeln delas i utfall, villkor (where, if, when, provided that) och undantag (unless, except where) med fasta regler.","graph":{"graph_version":"1","path":"topic → obligation → decision → sanction → compliance","relations":[{"from":"obligation:eu:gdpr-art-24-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-24-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-659-22#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-58-2","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-24-controller"]}},{"from":"sanction:eu:gdpr-art-58-2","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-24-controller"]}},{"from":"obligation:eu:gdpr-art-25-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-25-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-25-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-659-22#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-4","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-4","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-25-controller"]}},{"from":"sanction:eu:gdpr-art-83-4","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-25-controller"]}},{"from":"obligation:eu:gdpr-art-30-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-30-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-30-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-32-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-32-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-33-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-33-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-35-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-35-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-35-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-28-processor","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-28-processor","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-28-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"sanction:eu:gdpr-art-83-4","relation":"assessed_in","to":"compliance:gdpr:processor","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-28-processor"]}},{"from":"sanction:eu:gdpr-art-58-2","relation":"assessed_in","to":"compliance:gdpr:processor","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-28-processor"]}},{"from":"obligation:eu:gdpr-art-32-processor","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-32-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-33-processor","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-33-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-5-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-5-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-5-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-659-22#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-5","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-5-controller"]}},{"from":"sanction:eu:gdpr-art-83-5","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-5-controller"]}},{"from":"obligation:eu:gdpr-art-6-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-6-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-6-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-12-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-12-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-15-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-15-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-15-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-17-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-17-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-17-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-7-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-7-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-7-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-8-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-8-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-8-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-13-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-13-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-13-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-14-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-14-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-14-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-34-controller","relation":"interpreted_by","to":"decision:eu:c-659-22#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-34-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-34-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}}],"open":[],"method":"Deterministisk koppling via permanenta rekvisit-ID:n, registrets rättsakts-ID:n och en kuraterad rättsakt-till-ämne-tabell. Inga relationer skapas med fritextgissning."},"limits":[],"hash":"6ee3312479567dbb192668629300dec8ed7fae226a35f077937762598426c741"},"links":{"provisions":null,"case_law":{"precedent":"https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-659-22","conflict":"https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-659-22","citation_graph":"https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-659-22","weight":"https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-659-22"},"evidence":{"provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-659-22","chain_verify":"https://legal.exploreworldai.com/api/public/v1/changes/verify","object_changes":"https://legal.exploreworldai.com/api/public/v1/objects/changes"},"compact":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22?view=compact","representations":{"sv":"https://legal.exploreworldai.com/eu/praxis/c-659-22","en":"https://legal.exploreworldai.com/en/eu/praxis/c-659-22"},"machine_languages":["en","sv"],"ref":"eu:c-659-22"},"watch":{"risk":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-659-22","relations":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-659-22","risk_changes":"https://legal.exploreworldai.com/api/public/v1/risk-changes","node_state":"https://legal.exploreworldai.com/api/public/v1/node-state?id=eu%3Ac-659-22","provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-659-22"},"metadata":{"schema":"novacopilot_object_metadata/1","canonical_url":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22","source":"Source: NovaCopilot","official_source":null,"short_answer":null,"short_answer_status":"not_in_register","hash":"6ee3312479567dbb192668629300dec8ed7fae226a35f077937762598426c741","schema_version":"1","last_verified_at":null,"verification_status":"not_verified_yet","integrity_check_scope":"stored_content_only"},"hash":"sha256:f6627c60107ad0696ef8930cf40f67526e967780b89d2d18de1749557d0ac7c4","version":"legal-2026-11-03","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-03+legal-2026-11-03+2026-11-03T07:33:32","content_hash":"sha256:f6627c60107ad0696ef8930cf40f67526e967780b89d2d18de1749557d0ac7c4","revalidate_after":"2026-11-03T08:48:00.617Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-659-22","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-13b2feec99cebabdf8bf431f48d788ba","response_hash":"sha256:f6627c60107ad0696ef8930cf40f67526e967780b89d2d18de1749557d0ac7c4"}},"freshness":{"freshness_class":"live","as_of":"2026-11-03T07:48:01.249Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-659-22","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":7175}}