{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-21", "fingerprint": "ewai:se:0286e3", "proof": "sha256:f2dd89afc6685917a3b0ed0bec088dbab6c3188d211e244baa5b62a66cd0b5af", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "object_type": "edge", "object_id": "edge:eu:c-340-21", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge", "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21", "judgment": { "id": "eu:c-340-21", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-340-21" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-340-21", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-340-21", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-340-21", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-340-21", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-340-21", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-340-21", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-340-21", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-340-21", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-340-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-340-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-340-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-340-21" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-340-21", "item": { "judgment": "eu:c-340-21", "outgoing": [ { "edge_id": "edge:eu:c-340-21~follows~c-132-21", "type": "follows", "label_sv": "följer", "from": "eu:c-340-21", "to": { "ref": "C-132/21", "id": "eu:c-132-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-132-21" }, "paragraph_ids": [ "para_240" ], "excerpt": "The protection of rights conferred by that regulation, which the principle of effectiveness seeks to ensure, and in particular the right to an effective judicial remedy against the controller, which is guaranteed by Article 79(1) of that regulation, require an impartial tribunal to carry out an obje", "decided": "2023-12-14", "hash": "f52754f6c8ce1be16f91d40c1d0f406c92caff3b03f0fcbadc60b8fcc7cb33f8" }, { "edge_id": "edge:eu:c-340-21~follows~c-300-21", "type": "follows", "label_sv": "följer", "from": "eu:c-340-21", "to": { "ref": "C-300/21", "id": "eu:c-300-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-300-21" }, "paragraph_ids": [ "para_156", "para_232", "para_234", "para_270", "para_272", "para_278", "para_284" ], "excerpt": "As a preliminary point, it should be recalled that, according to settled case-law, the terms of a provision of EU law, such as Articles 24 and 32 of the GDPR, which makes no express reference to the law of the Member States for the purposes of determining its meaning and scope must normally be given", "decided": "2023-12-14", "hash": "903c01fb000917b0edfcfdb1cf0c95ef398ab1772bf753628f06077ce2ff64bc" }, { "edge_id": "edge:eu:c-340-21~follows~c-673-17", "type": "follows", "label_sv": "följer", "from": "eu:c-340-21", "to": { "ref": "C-673/17", "id": "eu:c-673-17-62017cj0673", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-673-17-62017cj0673" }, "paragraph_ids": [ "para_156" ], "excerpt": "As a preliminary point, it should be recalled that, according to settled case-law, the terms of a provision of EU law, such as Articles 24 and 32 of the GDPR, which makes no express reference to the law of the Member States for the purposes of determining its meaning and scope must normally be given", "decided": "2023-12-14", "hash": "3f6e592b6bb08fa4fe883a70925c9ade292d3cb42f3382f70b1b0070c6a57811" }, { "edge_id": "edge:eu:c-340-21~follows~c-817-19", "type": "follows", "label_sv": "följer", "from": "eu:c-340-21", "to": { "ref": "C-817/19", "id": "eu:c-817-19-62019cj0817", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-817-19-62019cj0817" }, "paragraph_ids": [ "para_234" ], "excerpt": "Therefore, in accordance with what has been stated in the preceding paragraph of the present judgment and in the absence of rules of EU law governing the matter, it is for the legal system of each Member State to prescribe the detailed rules for safeguarding rights which individuals derive from Arti", "decided": "2023-12-14", "hash": "b95d0ca2ceb7dc00b9e9537957b500870eb1089a56cd8732bc288a87faf82a86" }, { "edge_id": "edge:eu:c-340-21~cites~c-252-21", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-340-21", "to": { "ref": "C-252/21", "id": "eu:c-252-21", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-252-21" }, "paragraph_ids": [ "para_217" ], "excerpt": "It is clear from the wording of Article 5(2), Article 24(1) and Article 32(1) of the GDPR that the controller concerned bears the burden of proving that the personal data are processed in such a way as to ensure appropriate security of those data, within the meaning of Article 5(1)(f) and Article 32", "decided": "2023-12-14", "hash": "d283d18a56c548e89cf0c9d19adf014c02572f402d3cffd72b60306342d2b6da" }, { "edge_id": "edge:eu:c-340-21~cites~c-60-22", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-340-21", "to": { "ref": "C-60/22", "id": "eu:c-60-22", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-60-22" }, "paragraph_ids": [ "para_217" ], "excerpt": "It is clear from the wording of Article 5(2), Article 24(1) and Article 32(1) of the GDPR that the controller concerned bears the burden of proving that the personal data are processed in such a way as to ensure appropriate security of those data, within the meaning of Article 5(1)(f) and Article 32", "decided": "2023-12-14", "hash": "5a8648569e6724226e3b7f13ac3c09dee7354be1a5eb61a3f1eed2e410d2a194" } ], "incoming": [ { "edge_id": "edge:eu:62023cj0313~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:62023cj0313", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:62023cj0313", "paragraph_ids": [ "para_489", "para_499" ], "excerpt": "Those authorities must, like the national courts hearing an action under Article 78(1) or under Article 79(1) of the GDPR, make sure that the technical and organisational measures adopted by the controller are appropriate in order to ensure a level of security appropriate to the risk, as required by" }, { "edge_id": "edge:eu:c-169-23~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-169-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-169-23", "paragraph_ids": [ "para_319" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by taking into account the risks associated with the processing concerned and by assessing whether the nature, content and implementation of those measures are appropriate to those risks (see, to that effect, judgments of 14" }, { "edge_id": "edge:eu:c-200-23-62023cj0200~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-200-23-62023cj0200", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-200-23-62023cj0200", "paragraph_ids": [ "para_568", "para_572", "para_574", "para_611", "para_613", "para_617" ], "excerpt": "In particular, it is apparent from the illustrative list of types of ‘damage’ that may be suffered by data subjects, set out in the first sentence of recital 85 of the GDPR, that the EU legislature intended to include in the concept of ‘damage’ that may be suffered by data subjects, inter alia, the " }, { "edge_id": "edge:eu:c-456-22~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-456-22", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-456-22", "paragraph_ids": [ "para_64", "para_68", "para_74", "para_78" ], "excerpt": "It would be contrary to that broad conception of ‘damage’, favoured by the EU legislature, if that concept were limited solely to damage of a certain degree of seriousness, in particular as regards the duration of the period during which the negative consequences of the infringement of that regulati" }, { "edge_id": "edge:eu:c-492-23~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-492-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-492-23", "paragraph_ids": [ "para_416", "para_418", "para_428" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by assessing whether those measures were implemented by that controller taking into account the various criteria referred to in those articles and the data protection needs specifically inherent in the processing concerned a" }, { "edge_id": "edge:eu:c-590-22~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-590-22", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-590-22", "paragraph_ids": [ "para_150" ], "excerpt": "The Court has held that it is apparent not only from the wording of Article 82(1) of the GDPR, read in the light of recitals 85 and 146 of that regulation, which encourage the acceptance of a broad interpretation of the concept of ‘non-material damage’ within the meaning of that first provision, but" }, { "edge_id": "edge:eu:c-65-23~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-65-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-65-23", "paragraph_ids": [ "para_163", "para_186" ], "excerpt": "According to settled case-law, the terms of a provision of EU law, such as Article 88 of the GDPR, which makes no express reference to the law of the Member States for the purposes of determining its meaning and scope must normally be given an autonomous and uniform interpretation throughout the Eur" }, { "edge_id": "edge:eu:c-667-21~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-667-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-667-21", "paragraph_ids": [ "para_340", "para_346" ], "excerpt": "The appropriateness of such measures must be assessed in a concrete manner, by assessing whether those measures were implemented by that controller taking into account the various criteria referred to in those articles and the data protection needs specifically inherent in the processing concerned a" }, { "edge_id": "edge:eu:c-687-21~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-687-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-687-21", "paragraph_ids": [ "para_182", "para_184", "para_186", "para_188", "para_190", "para_194", "para_196", "para_229", "para_231", "para_233", "para_244" ], "excerpt": "Article 24 of the GDPR lays down a general obligation, on the part of the controller of personal data, to implement appropriate technical and organisational measures to ensure that that processing is performed in accordance with that regulation and to be able to demonstrate this (judgment of 14 Dece" }, { "edge_id": "edge:eu:c-741-21~follows~c-340-21", "type": "follows", "label_sv": "följer", "from": "eu:c-741-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-741-21", "paragraph_ids": [ "para_195" ], "excerpt": "In that regard, it must be pointed out that the circumstances of the exemption provided for in Article 82(3) of the GDPR must be strictly limited to those in which the controller is able to demonstrate that the damage is not attributable to him or her (see, to that effect, judgment of 14 December 20" } ], "acts": [], "counts": { "outgoing": 6, "incoming": 10, "acts": 0 }, "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21?follow=5", "hash": "0b6187a3861d1fb948db2dfcb00323b96a447b8b3a7a21d8f89864a3cabfd305" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-340-21", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-340-21", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-340-21", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-340-21" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-340-21", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-340-21" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-340-21" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:f2dd89afc6685917a3b0ed0bec088dbab6c3188d211e244baa5b62a66cd0b5af", "version": "legal-2026-10-21", "expires": "2026-10-22T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-21+legal-2026-10-21+2026-10-21T16:46:51", "content_hash": "sha256:f2dd89afc6685917a3b0ed0bec088dbab6c3188d211e244baa5b62a66cd0b5af", "revalidate_after": "2026-10-21T23:28:09.669Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-340-21", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "withheld": { "links.evidence": 3 }, "access": { "status": "partner_key_required", "header": "x-partner-key", "contact": "https://legal.exploreworldai.com/kontakt", "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot." }, "access_class": "relationship", "access_view": "public" }