{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-25", "fingerprint": "ewai:se:e4a2e5", "proof": "sha256:a66aa443a46272bfa90561d72c345b98fb40b5717554a20ef0dc8e0fe5afeeb6", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "object_type": "edge", "object_id": "edge:eu:c-683-21", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge", "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21", "judgment": { "id": "eu:c-683-21", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-683-21" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-683-21", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-683-21", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-683-21", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-683-21", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-683-21", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-683-21", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-683-21", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-683-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-683-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-683-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-683-21" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-683-21", "item": { "judgment": "eu:c-683-21", "outgoing": [ { "edge_id": "edge:eu:c-683-21~follows~c-175-20", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "to": { "ref": "C-175/20", "id": "eu:c-175-20-62020cj0175", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-175-20-62020cj0175" }, "paragraph_ids": [ "para_250" ], "excerpt": "It is therefore apparent from the wording of that provision, and in particular from the expression ‘any operation’, that the EU legislature intended to confer a broad scope upon the concept of ‘processing’ (see, to that effect, judgment of 24 February 2022, Valsts ieņēmumu dienests (Processing of pe", "decided": "2023-12-05", "hash": "ef945fff709e7acadc209e17f941a6aa87bf364fddbfae1710f792d78824c0ed" }, { "edge_id": "edge:eu:c-683-21~follows~c-25-17", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "to": { "ref": "C-25/17", "id": "eu:c-25-17", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-25-17" }, "paragraph_ids": [ "para_208", "para_233" ], "excerpt": "In that regard, it is not necessary that the purposes and means of processing be determined by the use of written guidelines or instructions from the controller (see, to that effect, judgment of 10 July 2018, Jehovan todistajat, C-25/17 , EU:C:2018:551 , paragraphs 67 and 68 ); nor is it necessary f", "decided": "2023-12-05", "hash": "1133a5b81469dbadb741d14880e3f35904b1d0d96b66b12d286e74fe8973b7bb" }, { "edge_id": "edge:eu:c-683-21~follows~c-300-21", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "to": { "ref": "C-300/21", "id": "eu:c-300-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-300-21" }, "paragraph_ids": [ "para_283" ], "excerpt": "Similarly, in the absence of specific procedural rules in the GDPR, it is for the legal system of each Member State, subject to compliance with the principles of equivalence and effectiveness, to prescribe the detailed rules governing actions for safeguarding rights which individuals derive from the", "decided": "2023-12-05", "hash": "8a7a14271783d1f06e4825bd7c15a44c4d266a56da202e1a3b374f734b5f2e13" }, { "edge_id": "edge:eu:c-683-21~follows~c-319-20", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "to": { "ref": "C-319/20", "id": "eu:c-319-20-62020cj0319", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-319-20-62020cj0319" }, "paragraph_ids": [ "para_206", "para_279", "para_281" ], "excerpt": "The objective of that broad definition consists, in accordance with the objective pursued by the GDPR, in ensuring effective protection of the fundamental rights and freedoms of natural persons and, in particular, in ensuring a high level of protection of the right of every person to the protection ", "decided": "2023-12-05", "hash": "793601f1cd14402ac94d1359d6eb7c2aa19633f5f15ec6ed5ff956d041f500af" }, { "edge_id": "edge:eu:c-683-21~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "to": { "ref": "C-40/17", "id": "eu:c-40-17", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-40-17" }, "paragraph_ids": [ "para_206", "para_231" ], "excerpt": "The objective of that broad definition consists, in accordance with the objective pursued by the GDPR, in ensuring effective protection of the fundamental rights and freedoms of natural persons and, in particular, in ensuring a high level of protection of the right of every person to the protection ", "decided": "2023-12-05", "hash": "6b1c4f065e83624ee497860820d740f5d0086293f407e8f75d6a2be5c6498579" }, { "edge_id": "edge:eu:c-683-21~cites~c-210-16", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-683-21", "to": { "ref": "C-210/16", "id": "eu:c-210-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-210-16" }, "paragraph_ids": [ "para_233" ], "excerpt": "On the contrary, those operators may be involved at different stages of that processing of personal data and to different degrees, so that the level of responsibility of each of them must be assessed with regard to all the relevant circumstances of the particular case (judgment of 5 June 2018, Wirts", "decided": "2023-12-05", "hash": "72471c6bce977a7d3379a73857d2dc08ddf5ab018f0054d203ba9ac16e52678e" }, { "edge_id": "edge:eu:c-683-21~cites~c-591-16", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-683-21", "to": { "ref": "C-591/16", "id": null, "url": null }, "paragraph_ids": [ "para_313" ], "excerpt": "In that regard, it must also be stated, in relation to the question whether an infringement has been committed intentionally or negligently and is therefore liable to be penalised by way of an administrative fine under Article 83 of the GDPR, that a controller may be penalised for conduct falling wi", "decided": "2023-12-05", "hash": "2b78808b5f3f712a3e5aa980fb0ed4d60abef932fd2ee5251bc5f8d80bb3bdb0" }, { "edge_id": "edge:eu:c-683-21~cites~c-601-16", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-683-21", "to": { "ref": "C-601/16", "id": null, "url": null }, "paragraph_ids": [ "para_313" ], "excerpt": "In that regard, it must also be stated, in relation to the question whether an infringement has been committed intentionally or negligently and is therefore liable to be penalised by way of an administrative fine under Article 83 of the GDPR, that a controller may be penalised for conduct falling wi", "decided": "2023-12-05", "hash": "6e1cf0470125127ce65852a854f28453b9f4411e5da9f34ad2b55b0d9a24df0d" }, { "edge_id": "edge:eu:c-683-21~cites~c-681-11", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-683-21", "to": { "ref": "C-681/11", "id": null, "url": null }, "paragraph_ids": [ "para_313" ], "excerpt": "In that regard, it must also be stated, in relation to the question whether an infringement has been committed intentionally or negligently and is therefore liable to be penalised by way of an administrative fine under Article 83 of the GDPR, that a controller may be penalised for conduct falling wi", "decided": "2023-12-05", "hash": "13eabf4a03504ef491c252f3342b6adf19c67db6e970d8600809e97dc486c46a" }, { "edge_id": "edge:eu:c-683-21~cites~c-94-15", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-683-21", "to": { "ref": "C-94/15", "id": null, "url": null }, "paragraph_ids": [ "para_315" ], "excerpt": "Where the controller is a legal person, it must also be stated that, for Article 83 of the GDPR to apply, it is not necessary for there to have been action by, or even knowledge on the part of, the management body of that legal person (see, by analogy, judgments of 7 June 1983, Musique diffusion fra", "decided": "2023-12-05", "hash": "0f3882350f80c254b3287d2ab59024ba61beff5a5f55da1009660ddf60f727c1" } ], "incoming": [ { "edge_id": "edge:eu:62023cj0313~follows~c-683-21", "type": "follows", "label_sv": "följer", "from": "eu:62023cj0313", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:62023cj0313", "paragraph_ids": [ "para_446" ], "excerpt": "In accordance with the Court’s settled case-law, that provision seeks to ensure, through a broad definition of the concept of ‘controller’, in accordance with the objective pursued by the GDPR, effective and complete protection of the fundamental rights and freedoms of natural persons and, in partic" }, { "edge_id": "edge:eu:c-199-24-62024cj0199~cites~c-683-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-199-24-62024cj0199", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-199-24-62024cj0199", "paragraph_ids": [ "para_112" ], "excerpt": "58 At the outset, in the light of the Court’s case-law according to which the concept of ‘processing’, within the meaning of Article 4(2) of the GDPR, has a broad scope (judgment of 5 December 2023, Nacionalinis visuomenės sveikatos centras , C-683/21, EU:C:2023:949, paragraph 50 and the case-law ci" }, { "edge_id": "edge:eu:c-231-22-62022cj0231~follows~c-683-21", "type": "follows", "label_sv": "följer", "from": "eu:c-231-22-62022cj0231", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-231-22-62022cj0231", "paragraph_ids": [ "para_143", "para_182", "para_184" ], "excerpt": "In that regard, it should be borne in mind that, according to the case-law of the Court, that provision is intended to ensure, through a broad definition of the concept of ‘controller’, effective and complete protection of data subjects (see, to that effect, judgments of 5 December 2023, Nacionalini" }, { "edge_id": "edge:eu:c-413-23-p-62023cj0413~cites~c-683-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-413-23-p-62023cj0413", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-413-23-p-62023cj0413", "paragraph_ids": [ "para_242" ], "excerpt": "That interpretation is borne out by the fifth and sixth sentences of recital 16 of Regulation 2018/1725, according to which the definition of the concept of ‘personal data’ does not include ‘anonymous information, namely information which does not relate to an identified or identifiable natural pers" }, { "edge_id": "edge:eu:c-484-24-62024cj0484~cites~c-683-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-484-24-62024cj0484", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-484-24-62024cj0484", "paragraph_ids": [ "para_363" ], "excerpt": "The use, in that article, of the expression ‘any operation’ implies that the EU legislature intended to confer a broad scope upon the concept of ‘processing’ (judgment of 5 December 2023, Nacionalinis visuomenės sveikatos centras, C-683/21 , EU:C:2023:949 , paragraph 50 and the case-law cited)." }, { "edge_id": "edge:eu:c-492-23~follows~c-683-21", "type": "follows", "label_sv": "följer", "from": "eu:c-492-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-492-23", "paragraph_ids": [ "para_288", "para_290", "para_296", "para_298", "para_300", "para_402" ], "excerpt": "The objective of that broad definition consists, in accordance with the objective pursued by the GDPR, in ensuring effective protection of the fundamental rights and freedoms of natural persons and in ensuring a high level of protection of the right of every person to the protection of personal data" }, { "edge_id": "edge:eu:c-604-22-62022cj0604~cites~c-683-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-604-22-62022cj0604", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-604-22-62022cj0604", "paragraph_ids": [ "para_187", "para_228", "para_232" ], "excerpt": "On the contrary, it follows from Article 4(5) of the GDPR, read in conjunction with recital 26 of that regulation, that personal data which could be attributed to a natural person by the use of additional information must be considered to be information on an identifiable natural person (judgment of" }, { "edge_id": "edge:eu:c-638-23-62023cj0638~follows~c-683-21", "type": "follows", "label_sv": "följer", "from": "eu:c-638-23-62023cj0638", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-638-23-62023cj0638", "paragraph_ids": [ "para_155", "para_191" ], "excerpt": "It is apparent from the case-law of the Court that that provision is intended to ensure, through a broad definition of the concept of ‘controller’, effective and complete protection of data subjects (see, to that effect, judgments of 5 December 2023, Nacionalinis visuomenės sveikatos centras, C-683/" }, { "edge_id": "edge:eu:c-768-21~follows~c-683-21", "type": "follows", "label_sv": "följer", "from": "eu:c-768-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-768-21", "paragraph_ids": [ "para_213", "para_227" ], "excerpt": "Thus, the system of sanctions provided for by the EU legislature allows supervisory authorities to impose the most appropriate and justified penalties depending on the circumstances of each individual case (see, to that effect, judgment of 5 December 2023, Nacionalinis visuomenės sveikatos centras, " }, { "edge_id": "edge:eu:c-807-21~cites~c-683-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-807-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-807-21", "paragraph_ids": [ "para_280" ], "excerpt": "In that regard, as has been observed in paragraphs 45 and 48 of the present judgment, the substantive conditions which a supervisory authority must satisfy when it imposes an administrative fine on a controller are governed solely by EU law, since those conditions are laid down, in detail and withou" } ], "acts": [], "counts": { "outgoing": 10, "incoming": 10, "acts": 0 }, "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21?follow=5", "hash": "a7ffe128bedda3125949b06a7e1b5e5c6f5573660986abb637fa5c219961a971" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-683-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-683-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-683-21" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-683-21", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-683-21" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-683-21" }, "watch": { "risk": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-683-21", "relations": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-683-21", "risk_changes": "https://legal.exploreworldai.com/api/public/v1/risk-changes", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-683-21" }, "metadata": { "schema": "novacopilot_object_metadata/1", "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21", "source": "Source: NovaCopilot", "official_source": null, "short_answer": null, "short_answer_status": "not_in_register", "hash": "a7ffe128bedda3125949b06a7e1b5e5c6f5573660986abb637fa5c219961a971", "schema_version": "1", "last_verified_at": null, "verification_status": "not_verified_yet", "integrity_check_scope": "stored_content_only" }, "hash": "sha256:a66aa443a46272bfa90561d72c345b98fb40b5717554a20ef0dc8e0fe5afeeb6", "version": "legal-2026-10-25", "expires": "2026-10-27T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-25+legal-2026-10-25+2026-10-25T13:37:31", "content_hash": "sha256:a66aa443a46272bfa90561d72c345b98fb40b5717554a20ef0dc8e0fe5afeeb6", "revalidate_after": "2026-10-26T12:12:05.757Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-683-21", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "withheld": { "links.evidence": 3 }, "access": { "status": "partner_key_required", "header": "x-partner-key", "contact": "https://legal.exploreworldai.com/kontakt", "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot." }, "access_class": "relationship", "access_view": "public" }