{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-22", "fingerprint": "ewai:se:c16d2a", "proof": "sha256:bc9304c8a37ac03a23d5976b82ca3fc0199d57e7e4c36e6aa4ca883b581a8131", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "object_type": "edge", "object_id": "edge:eu:c-169-23", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge", "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23", "judgment": { "id": "eu:c-169-23", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-169-23" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-169-23", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-169-23", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-169-23", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-169-23", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-169-23", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-169-23", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-169-23", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-169-23", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-169-23", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-169-23", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-169-23", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-169-23" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-169-23", "item": { "judgment": "eu:c-169-23", "outgoing": [ { "edge_id": "edge:eu:c-169-23~follows~c-132-21", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "to": { "ref": "C-132/21", "id": "eu:c-132-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-132-21" }, "paragraph_ids": [ "para_254" ], "excerpt": "In order to determine whether that exception covers personal data generated by the controller itself - in the performance of its tasks - from data obtained from a person other than the data subject, it is necessary, in accordance with settled case-law, to consider not only the wording of the provisi", "decided": "2024-11-28", "hash": "93041765b0523f9978fab64a2422075dc48defaba4ed7f908f04c2bd3118664a" }, { "edge_id": "edge:eu:c-169-23~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "to": { "ref": "C-340/21", "id": "eu:c-340-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-340-21" }, "paragraph_ids": [ "para_319" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by taking into account the risks associated with the processing concerned and by assessing whether the nature, content and implementation of those measures are appropriate to those risks (see, to that effect, judgments of 14", "decided": "2024-11-28", "hash": "9d0a4001ec063eba3a3f15376b51fa012af8f242ec9e583008e4ce7a21df6679" }, { "edge_id": "edge:eu:c-169-23~follows~c-604-22", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "to": { "ref": "C-604/22", "id": "eu:c-604-22-62022cj0604", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-604-22-62022cj0604" }, "paragraph_ids": [ "para_276" ], "excerpt": "In the third place, Article 14(5)(c) of the GDPR must be interpreted in a way which is consistent with the objective pursued by that regulation, which consists, inter alia, as is apparent from Article 1 thereof, read in the light of recitals 1 and 10 thereof, in ensuring a high level of protection o", "decided": "2024-11-28", "hash": "880feeade1ee3893a0d8ec2f07a8b20a3d563057006fccc922e911939b04fdf5" }, { "edge_id": "edge:eu:c-169-23~follows~c-659-22", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "to": { "ref": "C-659/22", "id": "eu:c-659-22", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-659-22" }, "paragraph_ids": [ "para_262" ], "excerpt": "The interpretation according to which ‘obtaining or disclosure’, within the meaning of Article 14(5)(c) of the GDPR, concerns personal data is moreover confirmed by the wide scope of the concept of ‘processing’, within the meaning of Article 4(2) of the GDPR, which covers any operation performed on ", "decided": "2024-11-28", "hash": "5c84937d05f180fabf09f62299ca989ef264b091d597b40710284bc86ac8a822" }, { "edge_id": "edge:eu:c-169-23~follows~c-687-21", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "to": { "ref": "C-687/21", "id": "eu:c-687-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21" }, "paragraph_ids": [ "para_319" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by taking into account the risks associated with the processing concerned and by assessing whether the nature, content and implementation of those measures are appropriate to those risks (see, to that effect, judgments of 14", "decided": "2024-11-28", "hash": "cce45837eedc7b2ca52a4ac3a7dc3312cfb367aaedd9c819bc8cdb38e8593ad9" }, { "edge_id": "edge:eu:c-169-23~cites~c-76-23", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-169-23", "to": { "ref": "C-76/23", "id": "eu:c-76-23", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-76-23" }, "paragraph_ids": [ "para_260" ], "excerpt": "Where there is a divergence between the various language versions of an EU legislative text, the provision in question must be interpreted by reference to the general scheme and purpose of the rules of which it forms part (judgment of 21 March 2024, Cobult, C-76/23 , EU:C:2024:253 , paragraph 25 and", "decided": "2024-11-28", "hash": "030c1e820844343eb45f46d0a8f9792e5ff292e3ea64d9de7c893d98b5680e1c" } ], "incoming": [ { "edge_id": "edge:eu:62023cj0313~follows~c-169-23", "type": "follows", "label_sv": "följer", "from": "eu:62023cj0313", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:62023cj0313", "paragraph_ids": [ "para_499" ], "excerpt": "Those authorities must, like the national courts hearing an action under Article 78(1) or under Article 79(1) of the GDPR, make sure that the technical and organisational measures adopted by the controller are appropriate in order to ensure a level of security appropriate to the risk, as required by" }, { "edge_id": "edge:eu:c-203-22-62022cj0203~follows~c-169-23", "type": "follows", "label_sv": "följer", "from": "eu:c-203-22-62022cj0203", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-203-22-62022cj0203", "paragraph_ids": [ "para_316" ], "excerpt": "In that regard, it is apparent from the Court’s case-law that personal data generated by the controller itself fall within the scope of Article 14 of the GDPR (see, to that effect, judgment of 28 November 2024, Másdi, C-169/23 , EU:C:2024:988 , paragraph 48 )." }, { "edge_id": "edge:eu:c-422-24~follows~c-169-23", "type": "follows", "label_sv": "följer", "from": "eu:c-422-24", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-422-24", "paragraph_ids": [ "para_111", "para_112", "para_115" ], "excerpt": "28 In order to answer that question, it is necessary, in accordance with the Court’s settled case-law, to consider not only the wording of those provisions but also their context and the objectives pursued by the legislation of which they form part (judgment of 28 November 2024, Másdi , C-169/23, EU" } ], "acts": [], "counts": { "outgoing": 6, "incoming": 3, "acts": 0 }, "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23?follow=5", "hash": "4ee52f4eb0ae3ed9ef4cadbdcd59fadff0860194c5a0d1956710531e6c3428ea" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-169-23", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-169-23", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-169-23", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-169-23" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-169-23", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-169-23" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-169-23" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:bc9304c8a37ac03a23d5976b82ca3fc0199d57e7e4c36e6aa4ca883b581a8131", "version": "legal-2026-10-22", "expires": "2026-10-23T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-22+legal-2026-10-22+2026-10-22T11:07:05", "content_hash": "sha256:bc9304c8a37ac03a23d5976b82ca3fc0199d57e7e4c36e6aa4ca883b581a8131", "revalidate_after": "2026-10-22T12:35:02.963Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-169-23", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "withheld": { "links.evidence": 3 }, "access": { "status": "partner_key_required", "header": "x-partner-key", "contact": "https://legal.exploreworldai.com/kontakt", "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot." }, "access_class": "relationship", "access_view": "public" }