{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-26",
    "fingerprint": "ewai:se:94378b",
    "proof": "sha256:92d907fe9aad2a35744056c771b9becf4f598cf2215288df3e1f83b95b01aa85",
    "jurisdiction": "se",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "edge",
  "object_id": "edge:eu:c-268-21",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21",
  "judgment": {
    "id": "eu:c-268-21",
    "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-268-21"
  },
  "siblings": {
    "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-268-21",
    "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-268-21",
    "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-268-21",
    "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-268-21",
    "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-268-21",
    "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-268-21",
    "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-268-21",
    "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-268-21",
    "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-268-21",
    "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-268-21",
    "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-268-21",
    "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-268-21"
  },
  "source": "NovaCopilot",
  "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-268-21",
  "item": {
    "judgment": "eu:c-268-21",
    "outgoing": [
      {
        "edge_id": "edge:eu:c-268-21~follows~c-180-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-180/21",
          "id": "eu:c-180-21-62021cj0180",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-180-21-62021cj0180"
        },
        "paragraph_ids": [
          "para_177"
        ],
        "excerpt": "It follows that a processing operation which falls within the material scope of the GDPR includes not only the creation and maintenance of the electronic staff register (see, by analogy, judgment of 30 May 2013, Worten, C-342/12 , EU:C:2013:355 , paragraph 19 ), but also the production as evidence o",
        "decided": "2023-03-02",
        "hash": "616902e7aedd43e22ffc2106c927004f1b03b0f1d173b829c2d10d7722974789"
      },
      {
        "edge_id": "edge:eu:c-268-21~follows~c-342-12",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-342/12",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_177"
        ],
        "excerpt": "It follows that a processing operation which falls within the material scope of the GDPR includes not only the creation and maintenance of the electronic staff register (see, by analogy, judgment of 30 May 2013, Worten, C-342/12 , EU:C:2013:355 , paragraph 19 ), but also the production as evidence o",
        "decided": "2023-03-02",
        "hash": "cbf5e56d5464344547c8fdbaa6631a7af88b4fc07e1701426e45e42896980097"
      },
      {
        "edge_id": "edge:eu:c-268-21~follows~c-439-19",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-439/19",
          "id": "eu:c-439-19",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-439-19"
        },
        "paragraph_ids": [
          "para_230"
        ],
        "excerpt": "According to that data minimisation principle, personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (see, to that effect, judgment of 22 June 2021, Latvijas Republikas Saeima (Penalty points), C-439/19 , EU:C:2021:504 , pa",
        "decided": "2023-03-02",
        "hash": "d0600307f4ffb926569a88b83d63d80ec025fb72c2c674c884e499b2a203f9b6"
      },
      {
        "edge_id": "edge:eu:c-268-21~follows~c-511-18",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-511/18",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_208"
        ],
        "excerpt": "In particular, any processing of personal data must, first, comply with the principles set out in Article 5 of that regulation and, second, satisfy the lawfulness conditions listed in Article 6 of the same regulation (see, to that effect, judgment of 6 October 2020, La Quadrature du Net and Others, ",
        "decided": "2023-03-02",
        "hash": "326c1947884a4e95e401e53a7e1674b19bb528357846c220a40596d3ab8c197f"
      },
      {
        "edge_id": "edge:eu:c-268-21~follows~c-512-18",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-512/18",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_208"
        ],
        "excerpt": "In particular, any processing of personal data must, first, comply with the principles set out in Article 5 of that regulation and, second, satisfy the lawfulness conditions listed in Article 6 of the same regulation (see, to that effect, judgment of 6 October 2020, La Quadrature du Net and Others, ",
        "decided": "2023-03-02",
        "hash": "7dc12c49f5e2cfcc8ee4aab5f2172d90c94bb6e33e9fbe5f99110ff9f0482d58"
      },
      {
        "edge_id": "edge:eu:c-268-21~follows~c-520-18",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-520/18",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_208"
        ],
        "excerpt": "In particular, any processing of personal data must, first, comply with the principles set out in Article 5 of that regulation and, second, satisfy the lawfulness conditions listed in Article 6 of the same regulation (see, to that effect, judgment of 6 October 2020, La Quadrature du Net and Others, ",
        "decided": "2023-03-02",
        "hash": "06ffb8ce8aac56c3478d3de04fbd802520254ac2fbc88b9d30590ef643728784"
      },
      {
        "edge_id": "edge:eu:c-268-21~cites~c-245-20",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-268-21",
        "to": {
          "ref": "C-245/20",
          "id": "eu:c-245-20",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-245-20"
        },
        "paragraph_ids": [
          "para_173"
        ],
        "excerpt": "It follows that, subject to the cases mentioned in Article 2(2) and (3) thereof, the GDPR applies to processing operations carried out both by private persons and by public authorities, including, as recital 20 thereof indicates, judicial authorities, such as courts (judgment of 24 March 2022, Autor",
        "decided": "2023-03-02",
        "hash": "0b904e27ba0ccf356f43f5812b7d29c012cc2d773cea1a37e4e41a0a9cb07170"
      }
    ],
    "incoming": [
      {
        "edge_id": "edge:eu:c-199-24-62024cj0199~follows~c-268-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-199-24-62024cj0199",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-199-24-62024cj0199",
        "paragraph_ids": [
          "para_91"
        ],
        "excerpt": "41 It is settled case-law that, in accordance with the principle of proportionality, achieving such a fair balance presupposes that the function of the fundamental rights at issue in society must be taken into account (judgments of 2 March 2023, Norra Stockholm Bygg , C-268/21, EU:C:2023:145, paragr"
      },
      {
        "edge_id": "edge:eu:c-203-22-62022cj0203~cites~c-268-21",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-203-22-62022cj0203",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-203-22-62022cj0203",
        "paragraph_ids": [
          "para_335"
        ],
        "excerpt": "That assessment may, depending on the case, lead it to authorise the full or partial disclosure to the opposing party of the personal data thus communicated to it, if it finds that such disclosure does not go beyond what is necessary for the purpose of guaranteeing the effective enjoyment of the rig"
      },
      {
        "edge_id": "edge:eu:c-484-24-62024cj0484~follows~c-268-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-484-24-62024cj0484",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-484-24-62024cj0484",
        "paragraph_ids": [
          "para_297",
          "para_381",
          "para_387",
          "para_487",
          "para_497"
        ],
        "excerpt": "In accordance with that objective, in order to be lawful, all processing of personal data falling within the scope of the GDPR must observe the principles set out in Chapter II of that regulation, and the rights of data subjects set out in Chapter III thereof (see, to that effect, judgment of 2 Marc"
      },
      {
        "edge_id": "edge:eu:c-65-23~follows~c-268-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-65-23",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-65-23",
        "paragraph_ids": [
          "para_204"
        ],
        "excerpt": "In particular, it must comply with the principles relating to the processing of those data provided for in Article 5 of that regulation and satisfy the conditions for lawful processing listed in Article 6 thereof (see, to that effect, judgments of 2 March 2023, Norra Stockholm Bygg, C-268/21 , EU:C:"
      },
      {
        "edge_id": "edge:eu:c-740-22~follows~c-268-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-740-22",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-740-22",
        "paragraph_ids": [
          "para_214"
        ],
        "excerpt": "Thus, a national court is required to apply the requirements of the GDPR as a whole, even if there is no specific provision in the applicable national law allowing regard to be had to the interests of the persons whose personal data are at issue (see, to that effect, judgment of 2 March 2023, Norra "
      },
      {
        "edge_id": "edge:eu:m-l-c-209-23~follows~c-268-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:m-l-c-209-23",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:m-l-c-209-23",
        "paragraph_ids": [
          "para_713"
        ],
        "excerpt": "In particular, any processing of personal data must, first, comply with the principles set out in Article 5 of that regulation and, second, satisfy at least one of the alternative lawfulness conditions listed in the first subparagraph of Article 6(1) of that regulation (see, to that effect, judgment"
      },
      {
        "edge_id": "edge:se:nja-2023-86~cites~c-268-21",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "se:nja-2023-86",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/se:nja-2023-86",
        "paragraph_ids": [
          "para_22",
          "para_28",
          "para_36",
          "para_40",
          "para_108"
        ],
        "excerpt": "EU-domstolen meddelade dom den 2 mars 2023 (i mål Norra Stockholm Bygg AB, C-268/21, EU:C:2023:145)."
      }
    ],
    "acts": [],
    "counts": {
      "outgoing": 7,
      "incoming": 7,
      "acts": 0
    },
    "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21?follow=5",
    "hash": "1fb7fc46c0f4ec681f7415eb0867550f709a4827d214534058cc99c0b675d74b"
  },
  "links": {
    "provisions": null,
    "case_law": {
      "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-268-21",
      "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-268-21",
      "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-268-21",
      "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-268-21"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21?view=compact",
    "representations": {
      "sv": "https://legal.exploreworldai.com/eu/praxis/c-268-21",
      "en": "https://legal.exploreworldai.com/en/eu/praxis/c-268-21"
    },
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:c-268-21"
  },
  "watch": {
    "risk": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-268-21",
    "relations": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-268-21",
    "risk_changes": "https://legal.exploreworldai.com/api/public/v1/risk-changes",
    "node_state": "https://legal.exploreworldai.com/api/public/v1/node-state?id=eu%3Ac-268-21",
    "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-268-21"
  },
  "metadata": {
    "schema": "novacopilot_object_metadata/1",
    "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21",
    "source": "Source: NovaCopilot",
    "official_source": null,
    "short_answer": null,
    "short_answer_status": "not_in_register",
    "hash": "1fb7fc46c0f4ec681f7415eb0867550f709a4827d214534058cc99c0b675d74b",
    "schema_version": "1",
    "last_verified_at": null,
    "verification_status": "not_verified_yet",
    "integrity_check_scope": "stored_content_only"
  },
  "hash": "sha256:92d907fe9aad2a35744056c771b9becf4f598cf2215288df3e1f83b95b01aa85",
  "version": "legal-2026-10-26",
  "expires": "2026-10-27T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-26+legal-2026-10-26+2026-10-26T21:17:09",
    "content_hash": "sha256:92d907fe9aad2a35744056c771b9becf4f598cf2215288df3e1f83b95b01aa85",
    "revalidate_after": "2026-10-26T22:53:33.253Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-268-21",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "links.evidence": 3
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "relationship",
  "access_view": "public"
}