{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-31","fingerprint":"ewai:se:7797e9","proof":"sha256:1a3f9f279d59b2d80a65018a69949d60795b0b26e4892de3ed74f1a2c3844f82","jurisdiction":"se","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","object_type":"decision","object_id":"decision:eu:c-683-21","schema_version":"1","schema":"https://legal.exploreworldai.com/api/public/v1/schemas/decision","url":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21","judgment":{"id":"eu:c-683-21","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-683-21"},"siblings":{"risk":"https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-683-21","relation":"https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-683-21","change":"https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-683-21","agent":"https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-683-21","provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-683-21","status":"https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-683-21","precedent":"https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21","edge":"https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21","element":"https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-683-21","weight":"https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-683-21","conflict":"https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-683-21","citation_graph":"https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-683-21"},"source":"NovaCopilot","precedent_graph":"https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-683-21","item":{"judgment":"eu:c-683-21","issue":"Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Article 4(2) and (7) – Concepts of ‘processing’ and ‘controller’ – Development of a mobile IT application – Article 26 – Joint control – Article 83 – Imposition of administrative fines – Conditions – Requirement that the infringement be intentional or negligent – Responsibility and liability of the controller for the processing of personal data carried out by a processor.","decisions":[{"decision_id":"decision:eu:c-683-21#1","precedent_id":"precedent:eu:c-683-21#1","paragraph_id":"para_329","outcome":"permits","then":"Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), must be interpreted as meaning that an entity which has entrusted an undertaking with the development of a mobile IT application and which has, in that context, participated in the determination of the purposes and means of the processing of personal data carried out through that application may be re","conditions":[{"text":"if that entity has not itself performed any processing operations in respect of such data","elements":["element:gdpr:processing"]}],"exceptions":[{"text":"unless","elements":[]}],"elements":["element:gdpr:personal-data","element:gdpr:processing","element:gdpr:controller"],"open":[]},{"decision_id":"decision:eu:c-683-21#3","precedent_id":"precedent:eu:c-683-21#3","paragraph_id":"para_332","outcome":"permits","then":"Article 4(7) and Article 26(1) of Regulation 2016/679 must be interpreted as meaning that the classification of two entities as joint controllers does not require that there be an arrangement between those entities regarding the determination of the purposes and means of the processing of personal data in question, nor does it require that there be an arrangement laying down the terms of the joint control. must be interpreted as meaning that the use of personal data for the purposes of the IT testing of a mobile application constitutes ‘processing’, within the meaning of that provision, in the","conditions":[{"text":"where it is established that the controller has intentionally or negligently committed an infringement referred to in paragraphs 4 to 6 of that article","elements":["element:gdpr:controller"]},{"text":"and (ii) such a fine may be imposed on a controller in respect of personal data processing operations performed by a processor on behalf of that controller","elements":["element:gdpr:personal-data","element:gdpr:processing","element:gdpr:controller","element:gdpr:processor"]}],"exceptions":[{"text":"unless such data have been rendered anonymous in such a manner that the subject of those data is not or is no longer identifiable","elements":[]},{"text":"unless it involves fictitious data which do not relate to an existing natural person. must be interpreted as meaning that (i) an administrative fine may be imposed pursuant to that provision only","elements":[]},{"text":"unless","elements":[]}],"elements":["element:gdpr:personal-data","element:gdpr:processing","element:gdpr:controller","element:gdpr:processor"],"open":[]}],"text_sha256":"61e2a1edcf2a30e03d5d266c578ea763166c7eb6bcc67aea196832e104492cbb","method":"Rättsregeln delas i utfall, villkor (where, if, when, provided that) och undantag (unless, except where) med fasta regler.","graph":{"graph_version":"1","path":"topic → obligation → decision → sanction → compliance","relations":[{"from":"obligation:eu:gdpr-art-24-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-24-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-683-21#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-58-2","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-24-controller"]}},{"from":"sanction:eu:gdpr-art-58-2","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-24-controller"]}},{"from":"obligation:eu:gdpr-art-25-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-25-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-25-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-683-21#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-4","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-4","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-25-controller"]}},{"from":"sanction:eu:gdpr-art-83-4","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-25-controller"]}},{"from":"obligation:eu:gdpr-art-30-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-30-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-30-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-32-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-32-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-33-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-33-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-35-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-35-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-35-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-28-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-28-processor","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-28-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"sanction:eu:gdpr-art-83-4","relation":"assessed_in","to":"compliance:gdpr:processor","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-28-processor"]}},{"from":"sanction:eu:gdpr-art-58-2","relation":"assessed_in","to":"compliance:gdpr:processor","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-28-processor"]}},{"from":"obligation:eu:gdpr-art-32-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-32-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-33-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-33-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-5-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-5-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-5-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"decision:eu:c-683-21#1","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-5","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-5-controller"]}},{"from":"sanction:eu:gdpr-art-83-5","relation":"assessed_in","to":"compliance:gdpr:controller","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=controller","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-5-controller"]}},{"from":"obligation:eu:gdpr-art-6-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-6-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-6-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-12-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-12-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-15-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-15-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-15-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-17-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-17-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-17-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-7-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-7-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-7-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-8-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-8-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-8-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-13-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-13-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-13-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-14-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-14-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-14-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-34-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#1","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-34-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-34-controller","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-24-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:controller"]}},{"from":"decision:eu:c-683-21#3","relation":"exposes_to","to":"sanction:eu:gdpr-art-58-2","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-58-2","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-24-controller"]}},{"from":"obligation:eu:gdpr-art-25-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-25-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"decision:eu:c-683-21#3","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-4","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-4","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-25-controller"]}},{"from":"obligation:eu:gdpr-art-30-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-30-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-32-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"obligation:eu:gdpr-art-33-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-35-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-35-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"obligation:eu:gdpr-art-28-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-28-processor","basis":{"type":"shared_element","refs":["element:gdpr:processor","element:gdpr:processing"]}},{"from":"obligation:eu:gdpr-art-32-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-32-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data"]}},{"from":"obligation:eu:gdpr-art-33-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-33-processor","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:processor"]}},{"from":"obligation:eu:gdpr-art-5-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-5-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"decision:eu:c-683-21#3","relation":"exposes_to","to":"sanction:eu:gdpr-art-83-5","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-83-5","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-5-controller"]}},{"from":"obligation:eu:gdpr-art-6-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-6-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing","element:gdpr:personal-data"]}},{"from":"obligation:eu:gdpr-art-12-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-12-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-15-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-15-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-17-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-17-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-7-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-7-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"obligation:eu:gdpr-art-8-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-8-controller","basis":{"type":"shared_element","refs":["element:gdpr:processing"]}},{"from":"obligation:eu:gdpr-art-13-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-13-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-14-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-14-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-34-controller","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-34-controller","basis":{"type":"shared_element","refs":["element:gdpr:personal-data","element:gdpr:controller"]}},{"from":"obligation:eu:gdpr-art-28-2-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-28-2-processor","basis":{"type":"shared_element","refs":["element:gdpr:processor"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-28-2-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-30-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-30-processor","basis":{"type":"shared_element","refs":["element:gdpr:processor"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-30-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"obligation:eu:gdpr-art-44-processor","relation":"interpreted_by","to":"decision:eu:c-683-21#3","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-44-processor","basis":{"type":"shared_element","refs":["element:gdpr:processor"]}},{"from":"topic:se:dataskydd","relation":"frames","to":"obligation:eu:gdpr-art-44-processor","url":"https://legal.exploreworldai.com/api/public/v1/topic-node?topic=dataskydd&jurisdiction=se","basis":{"type":"curated_act_topic","refs":["gdpr","https://legal.exploreworldai.com/en/amnen/dataskydd"]}},{"from":"sanction:eu:gdpr-art-83-5","relation":"assessed_in","to":"compliance:gdpr:processor","url":"https://legal.exploreworldai.com/api/public/v1/compliance-chain?act=gdpr&role=processor","basis":{"type":"obligation_coverage","refs":["obligation:eu:gdpr-art-44-processor"]}}],"open":[],"method":"Deterministisk koppling via permanenta rekvisit-ID:n, registrets rättsakts-ID:n och en kuraterad rättsakt-till-ämne-tabell. Inga relationer skapas med fritextgissning."},"limits":[],"hash":"96ee4a3a506e8fc60e1ecf797bf48890e4485a8bc3593670049505358ea2c0a2"},"links":{"provisions":null,"case_law":{"precedent":"https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21","conflict":"https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-683-21","citation_graph":"https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-683-21","weight":"https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-683-21"},"evidence":{"provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-683-21","chain_verify":"https://legal.exploreworldai.com/api/public/v1/changes/verify","object_changes":"https://legal.exploreworldai.com/api/public/v1/objects/changes"},"compact":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21?view=compact","representations":{"sv":"https://legal.exploreworldai.com/eu/praxis/c-683-21","en":"https://legal.exploreworldai.com/en/eu/praxis/c-683-21"},"machine_languages":["en","sv"],"ref":"eu:c-683-21"},"watch":{"risk":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-683-21","relations":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-683-21","risk_changes":"https://legal.exploreworldai.com/api/public/v1/risk-changes","node_state":"https://legal.exploreworldai.com/api/public/v1/node-state?id=eu%3Ac-683-21","provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-683-21"},"metadata":{"schema":"novacopilot_object_metadata/1","canonical_url":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21","source":"Source: NovaCopilot","official_source":null,"short_answer":null,"short_answer_status":"not_in_register","hash":"96ee4a3a506e8fc60e1ecf797bf48890e4485a8bc3593670049505358ea2c0a2","schema_version":"1","last_verified_at":null,"verification_status":"not_verified_yet","integrity_check_scope":"stored_content_only"},"hash":"sha256:1a3f9f279d59b2d80a65018a69949d60795b0b26e4892de3ed74f1a2c3844f82","version":"legal-2026-10-31","expires":"2026-11-01T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-31+legal-2026-10-31+2026-10-31T04:42:17","content_hash":"sha256:1a3f9f279d59b2d80a65018a69949d60795b0b26e4892de3ed74f1a2c3844f82","revalidate_after":"2026-10-31T10:53:43.560Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","freshness":{"freshness_class":"live","as_of":"2026-10-31T09:53:44.188Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":11052}}