{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-26", "fingerprint": "ewai:se:81a25d", "proof": "sha256:4c4946f9404dbd0261559cf6bc452eea870bc849dde159eff0913e57db4a8df8", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "object_type": "edge", "object_id": "edge:eu:c-40-17", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge", "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17", "judgment": { "id": "eu:c-40-17", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-40-17" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-40-17", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-40-17", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-40-17", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-40-17", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-40-17", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-40-17", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-40-17", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-40-17", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-40-17", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-40-17", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-40-17", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-40-17" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-40-17", "item": { "judgment": "eu:c-40-17", "outgoing": [ { "edge_id": "edge:eu:c-40-17~follows~c-101-01", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-101/01", "id": "eu:c-101-01", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-101-01" }, "paragraph_ids": [ "para_244", "para_256", "para_262" ], "excerpt": "Those rules have a degree of flexibility and, in many instances, leave to the Member States the task of deciding the details or choosing between options, meaning that, in many respects, Member States have a margin of discretion in implementing that directive (see, to that effect, judgments of 6 Nove", "decided": "2019-07-29", "hash": "c5d03f69bbdc673bb04310c3e932dcfd20236cde4b2191668bf9b349023abec2" }, { "edge_id": "edge:eu:c-40-17~follows~c-103-16", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-103/16", "id": "eu:c-103-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-103-16" }, "paragraph_ids": [ "para_242" ], "excerpt": "That freedom of choice does not affect the obligation imposed on all Member States to which the directive is addressed to adopt all the measures necessary to ensure that the directive concerned is fully effective in accordance with the objective which it seeks to attain (judgments of 6 October 2010,", "decided": "2019-07-29", "hash": "8138b52dc51f1b7a65154157bf291915a96f6ce9e47ce6852c64755869d46402" }, { "edge_id": "edge:eu:c-40-17~follows~c-131-12", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-131/12", "id": null, "url": null }, "paragraph_ids": [ "para_244", "para_277", "para_333" ], "excerpt": "In this regard, it must be noted that one of the underlying objectives of Directive 95/46 is to ensure effective and complete protection of the fundamental rights and freedoms of natural persons, and in particular their right to privacy, with respect to the processing of personal data (see, to that ", "decided": "2019-07-29", "hash": "983bc3d5a077ef2b85633ce66078ebfb8c930c799a5bcb8b5646f739cac1a9e7" }, { "edge_id": "edge:eu:c-40-17~follows~c-201-14", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-201/14", "id": "eu:c-201-14", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-201-14" }, "paragraph_ids": [ "para_333" ], "excerpt": "In this regard, it should be noted at the outset that, according to the provisions of Chapter II of Directive 95/46, headed ‘General rules on the lawfulness of the processing of personal data’, subject to the derogations permitted under Article 13 of that directive, all processing of personal data m", "decided": "2019-07-29", "hash": "bcf4398140446a183bfcce648afd6810d2979d776e1b85c59dd1438924afbf08" }, { "edge_id": "edge:eu:c-40-17~follows~c-210-16", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-210/16", "id": "eu:c-210-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-210-16" }, "paragraph_ids": [ "para_203", "para_275", "para_277", "para_279", "para_283", "para_311" ], "excerpt": "In this regard, it should be noted that, in accordance with the aim pursued by Directive 95/46, namely to ensure a high level of protection of the fundamental rights and freedoms of natural persons, in particular their right to privacy, with respect to the processing of personal data, Article 2(d) o", "decided": "2019-07-29", "hash": "37f4bda2e16683f86d22a06fc4691d9a467f62e9c776a6b02701cf2b1e3c293c" }, { "edge_id": "edge:eu:c-40-17~follows~c-25-17", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-25/17", "id": "eu:c-25-17", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-25-17" }, "paragraph_ids": [ "para_279", "para_281", "para_283", "para_285" ], "excerpt": "Furthermore, since, as Article 2(d) of Directive 95/46 expressly provides, the concept of ‘controller’ relates to the entity which ‘alone or jointly with others’ determines the purposes and means of the processing of personal data, that concept does not necessarily refer to a single entity and may c", "decided": "2019-07-29", "hash": "02e36f39696684b15b4cf1d49e9b1cc7d012eeee5b540eb045bd723d4d2fc911" }, { "edge_id": "edge:eu:c-40-17~follows~c-389-08", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-389/08", "id": "eu:c-389-08", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-389-08" }, "paragraph_ids": [ "para_242" ], "excerpt": "That freedom of choice does not affect the obligation imposed on all Member States to which the directive is addressed to adopt all the measures necessary to ensure that the directive concerned is fully effective in accordance with the objective which it seeks to attain (judgments of 6 October 2010,", "decided": "2019-07-29", "hash": "a84f99bf51851cf420892929b9e40064cd70517227e7dfaba24abd5781974a46" }, { "edge_id": "edge:eu:c-40-17~follows~c-468-10", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-468/10", "id": null, "url": null }, "paragraph_ids": [ "para_244", "para_252", "para_254", "para_256" ], "excerpt": "Directive 95/46 does indeed amount to a harmonisation of national legislation on the protection of personal data that is generally complete (see, to that effect, judgments of 24 November 2011, Asociación Nacional de Establecimientos Financieros de Crédito, C-468/10 and C-469/10 , EU:C:2011:777 , par", "decided": "2019-07-29", "hash": "6a2210eae09e0b87c5ea08b949cf48bc580a3489c05b17f40f4dd09f5d1d26ac" }, { "edge_id": "edge:eu:c-40-17~follows~c-469-10", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-469/10", "id": null, "url": null }, "paragraph_ids": [ "para_244", "para_252", "para_254", "para_256" ], "excerpt": "Directive 95/46 does indeed amount to a harmonisation of national legislation on the protection of personal data that is generally complete (see, to that effect, judgments of 24 November 2011, Asociación Nacional de Establecimientos Financieros de Crédito, C-468/10 and C-469/10 , EU:C:2011:777 , par", "decided": "2019-07-29", "hash": "fc47fd0427b4bfaec42bce1be65cbaf22e03598db1a2870165dfeba057befccf" }, { "edge_id": "edge:eu:c-40-17~follows~c-473-12", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-473/12", "id": null, "url": null }, "paragraph_ids": [ "para_252", "para_356" ], "excerpt": "Directive 95/46 does indeed amount to a harmonisation of national legislation on the protection of personal data that is generally complete (see, to that effect, judgments of 24 November 2011, Asociación Nacional de Establecimientos Financieros de Crédito, C-468/10 and C-469/10 , EU:C:2011:777 , par", "decided": "2019-07-29", "hash": "ebf03c979e0528dee5fa5c5266986a2e9973e72d3cc9652a9326a2a2617571b0" }, { "edge_id": "edge:eu:c-40-17~follows~c-553-07", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-553/07", "id": "eu:c-553-07", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-553-07" }, "paragraph_ids": [ "para_356" ], "excerpt": "It thus appears that that information must be given by the controller immediately, that is to say, when the data are collected (see, to that effect, judgments of 7 May 2009, Rijkeboer, C-553/07 , EU:C:2009:293 , paragraph 68 , and of 7 November 2013, IPI, C-473/12 , EU:C:2013:715 , paragraph 23 ).", "decided": "2019-07-29", "hash": "a950325ddf2559cd12540a98baee33ab6ab7b629c052d1e41f9e6dd6c66c1c1d" }, { "edge_id": "edge:eu:c-40-17~follows~c-73-16", "type": "follows", "label_sv": "följer", "from": "eu:c-40-17", "to": { "ref": "C-73/16", "id": "eu:c-73-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-73-16" }, "paragraph_ids": [ "para_244", "para_260" ], "excerpt": "In this regard, it must be noted that one of the underlying objectives of Directive 95/46 is to ensure effective and complete protection of the fundamental rights and freedoms of natural persons, and in particular their right to privacy, with respect to the processing of personal data (see, to that ", "decided": "2019-07-29", "hash": "114011415e056823314b51917208480c8334f0ae0a2aeea283db39c88837195e" }, { "edge_id": "edge:eu:c-40-17~cites~c-13-16", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-40-17", "to": { "ref": "C-13/16", "id": "eu:c-13-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-13-16" }, "paragraph_ids": [ "para_337" ], "excerpt": "Article 7(f) of that directive thus lays down three cumulative conditions for the processing of personal data to be lawful, namely, first, the pursuit of a legitimate interest by the data controller or by the third party or parties to whom the data are disclosed; second, the need to process personal", "decided": "2019-07-29", "hash": "243164836c79c6415d3223f1b248f10dbbc6c1802d611fa387983ddf941df612" }, { "edge_id": "edge:eu:c-40-17~cites~c-195-16", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-40-17", "to": { "ref": "C-195/16", "id": "eu:c-195-16", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-195-16" }, "paragraph_ids": [ "para_258" ], "excerpt": "This is also the case for Articles 22 to 24 of Directive 95/46, which, as the Advocate General noted in point 42 of his Opinion, are worded in general terms and do not amount to an exhaustive harmonisation of the national provisions stipulating the judicial remedies that can be brought against a per", "decided": "2019-07-29", "hash": "02d8b01bdc5215e079f72228432a0770062927b56179c6f4b0957d5bc97dd880" }, { "edge_id": "edge:eu:c-40-17~cites~c-524-06", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-40-17", "to": { "ref": "C-524/06", "id": "eu:c-524-06", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-524-06" }, "paragraph_ids": [ "para_244" ], "excerpt": "Recital 10 of Directive 95/46 adds that the approximation of the national laws applicable in this area must not result in any lessening of the protection which they afford but must, on the contrary, seek to ensure a high level of protection in the European Union (judgments of 6 November 2003, Lindqv", "decided": "2019-07-29", "hash": "2a934555cf23f39dd2134c2c70d3f74d26d98943efa2c85c43a42cfca116f7ff" }, { "edge_id": "edge:eu:c-40-17~cites~c-582-14", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-40-17", "to": { "ref": "C-582/14", "id": "eu:c-582-14-62014co0582", "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-582-14-62014co0582" }, "paragraph_ids": [ "para_254" ], "excerpt": "The Court has thus held that Article 7 of that directive sets out an exhaustive and restrictive list of cases in which the processing of personal data can be regarded as being lawful and that Member States cannot add new principles relating to the lawfulness of the processing of personal data to tha", "decided": "2019-07-29", "hash": "bf597401d80dfea0b1da34df6c8af115aa7ace53c2e1ec54cfbef74ae3d8daa3" } ], "incoming": [ { "edge_id": "edge:eu:c-180-21-62021cj0180~cites~c-40-17", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-180-21-62021cj0180", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-180-21-62021cj0180", "paragraph_ids": [ "para_323" ], "excerpt": "Its status as ‘controller’, having regard to the broad definition of that concept, which seeks to ensure effective and complete protection of data subjects, is independent of the extent of its involvement and its level of responsibility, which may be different from those of the court having jurisdic" }, { "edge_id": "edge:eu:c-319-20-62020cj0319~cites~c-40-17", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-319-20-62020cj0319", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-319-20-62020cj0319", "paragraph_ids": [ "para_246" ], "excerpt": "That government observes, moreover, that, in its judgment of 29 July 2019, Fashion ID ( C-40/17 , EU:C:2019:629 ), concerning the interpretation of the provisions of Directive 95/46, the Court held that those provisions do not preclude that national legislation." }, { "edge_id": "edge:eu:c-413-23-p-62023cj0413~cites~c-40-17", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-413-23-p-62023cj0413", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-413-23-p-62023cj0413", "paragraph_ids": [ "para_309" ], "excerpt": "It follows from the very wording of that provision that that information must be provided by the controller immediately, that is to say, when those data are collected (see, by analogy, judgment of 29 July 2019, Fashion ID, C-40/17 , EU:C:2019:629 , paragraph 104 and the case-law cited)." }, { "edge_id": "edge:eu:c-472-20~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-472-20", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-472-20", "paragraph_ids": [ "para_89" ], "excerpt": "35 It should be noted at the outset that, although it follows from the third paragraph of Article 288 TFEU that, when transposing a directive, the Member States enjoy a broad discretion as to the choice of ways and means of ensuring that it is implemented, that freedom does not affect the obligation" }, { "edge_id": "edge:eu:c-492-23~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-492-23", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-492-23", "paragraph_ids": [ "para_292", "para_298", "para_316" ], "excerpt": "Furthermore, since, as Article 4(7) of the GDPR expressly provides, the concept of ‘controller’ relates to the entity which ‘alone or jointly with others’ determines the purposes and means of the processing of personal data, that concept does not necessarily refer to a single entity and may concern " }, { "edge_id": "edge:eu:c-604-22-62022cj0604~cites~c-40-17", "type": "cites", "label_sv": "hänvisar till", "from": "eu:c-604-22-62022cj0604", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-604-22-62022cj0604", "paragraph_ids": [ "para_260" ], "excerpt": "Therefore, and without prejudice to any civil liability provided for in national law in that respect, such a natural or legal person cannot be regarded as a controller, within the meaning of those provisions, in respect of operations that precede or are subsequent in the overall chain of processing " }, { "edge_id": "edge:eu:c-683-21~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-683-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21", "paragraph_ids": [ "para_206", "para_231" ], "excerpt": "The objective of that broad definition consists, in accordance with the objective pursued by the GDPR, in ensuring effective protection of the fundamental rights and freedoms of natural persons and, in particular, in ensuring a high level of protection of the right of every person to the protection " }, { "edge_id": "edge:eu:c-796-19~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-796-19", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-796-19", "paragraph_ids": [ "para_233" ], "excerpt": "Third, as for the argument based on the principles of Member States’ institutional autonomy, proportionality and subsidiarity, suffice it to note that although it follows from Article 288 TFEU that Member States, when transposing a directive, retain a broad discretion as to the choice of ways and me" }, { "edge_id": "edge:eu:c-807-21~follows~c-40-17", "type": "follows", "label_sv": "följer", "from": "eu:c-807-21", "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-807-21", "paragraph_ids": [ "para_229" ], "excerpt": "The objective of that broad definition in Article 4(7) of the GDPR - which expressly includes legal persons - is, in a manner consistent with the objective of the GDPR, to ensure effective protection of the fundamental rights and freedoms of natural persons and, in particular, to ensure a high level" } ], "acts": [], "counts": { "outgoing": 16, "incoming": 9, "acts": 0 }, "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17?follow=5", "hash": "15e4830582359f9f45315e74c7dbc4912c047a2a489d19b79997cf40e0df038f" }, "links": { "provisions": null, "case_law": { "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-40-17", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-40-17", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-40-17", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-40-17" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17?view=compact", "representations": { "sv": "https://legal.exploreworldai.com/eu/praxis/c-40-17", "en": "https://legal.exploreworldai.com/en/eu/praxis/c-40-17" }, "machine_languages": [ "en", "sv" ], "ref": "eu:c-40-17" }, "watch": { "risk": "https://legal.exploreworldai.com/api/public/v1/risk?id=eu%3Ac-40-17", "relations": "https://legal.exploreworldai.com/api/public/v1/relations?id=eu%3Ac-40-17", "risk_changes": "https://legal.exploreworldai.com/api/public/v1/risk-changes", "node_state": "https://legal.exploreworldai.com/api/public/v1/node-state?id=eu%3Ac-40-17", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-40-17" }, "metadata": { "schema": "novacopilot_object_metadata/1", "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17", "source": "Source: NovaCopilot", "official_source": null, "short_answer": null, "short_answer_status": "not_in_register", "hash": "15e4830582359f9f45315e74c7dbc4912c047a2a489d19b79997cf40e0df038f", "schema_version": "1", "last_verified_at": null, "verification_status": "not_verified_yet", "integrity_check_scope": "stored_content_only" }, "hash": "sha256:4c4946f9404dbd0261559cf6bc452eea870bc849dde159eff0913e57db4a8df8", "version": "legal-2026-10-26", "expires": "2026-10-27T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-26+legal-2026-10-26+2026-10-26T21:17:09", "content_hash": "sha256:4c4946f9404dbd0261559cf6bc452eea870bc849dde159eff0913e57db4a8df8", "revalidate_after": "2026-10-26T23:46:49.012Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-40-17", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering", "withheld": { "links.evidence": 3 }, "access": { "status": "partner_key_required", "header": "x-partner-key", "contact": "https://legal.exploreworldai.com/kontakt", "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot." }, "access_class": "relationship", "access_view": "public" }