{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-24-controller", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-24-controller)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-06", "fingerprint": "ewai:se:4b9dc1", "proof": "sha256:47d32f6615c8393b007605d4c8b996f8d5fe9b47b531f69affacf3a6eb597cbc", "jurisdiction": "se", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "object_type": "package", "object_id": "package:eu:gdpr-art-24-controller", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/package", "url": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-24-controller", "judgment": { "id": "eu:gdpr-art-24-controller", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:gdpr-art-24-controller" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:gdpr-art-24-controller", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:gdpr-art-24-controller", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:gdpr-art-24-controller", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:gdpr-art-24-controller", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:gdpr-art-24-controller", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:gdpr-art-24-controller", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:gdpr-art-24-controller", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:gdpr-art-24-controller", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:gdpr-art-24-controller", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:gdpr-art-24-controller", "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller", "sanction": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr-art-24-controller", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:gdpr-art-24-controller", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:gdpr-art-24-controller", "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr-art-24-controller", "provision_link": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr-art-24-controller", "brief": "https://legal.exploreworldai.com/api/public/v1/obj/brief/eu:gdpr-art-24-controller", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:gdpr-art-24-controller", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr-art-24-controller", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr-art-24-controller", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-24-controller", "answer_node": "https://legal.exploreworldai.com/api/public/v1/obj/answer_node/eu:gdpr-art-24-controller", "exception": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr-art-24-controller", "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr-art-24-controller", "case_kit": "https://legal.exploreworldai.com/api/public/v1/obj/case_kit/eu:gdpr-art-24-controller", "documentation_requirement": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:gdpr-art-24-controller", "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:gdpr-art-24-controller", "action_kit": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr-art-24-controller" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:gdpr-art-24-controller", "item": { "question": "What must a controller do under GDPR art. 24?", "answer": "Controller must implement and demonstrate measures that make processing compliant (GDPR: Regulation (EU) 2016/679).", "obligation": "obligation:eu:gdpr-art-24-controller", "exceptions": [ { "id": "exception:eu:gdpr-household", "provision": "GDPR art. 2.2 c", "condition": "Processing by a natural person in the course of a purely personal or household activity.", "effect": "not_applicable" } ], "deadline": null, "timeline": { "in_application": true, "next_milestone": null, "relative_deadlines": [ "72 hours", "30 days" ] }, "source": { "title": "GDPR: Regulation (EU) 2016/679", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, "contract": "frozen_core_v1", "frozen_fields": [ "question", "answer", "obligation", "exceptions", "deadline", "timeline", "source" ], "risk_level": "medium", "risk_reason": "Breach of GDPR: Regulation (EU) 2016/679: Implement and demonstrate measures that make processing compliant.", "risk_consequence": "corrective_order (Competent supervisory authority)", "risk_source": { "provision": "Regulation (EU) 2016/679 (GDPR)", "authority": "Competent supervisory authority", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj" }, "verification_state": "partially_verified", "verified_at": "2026-08-31", "verified_sources": [ "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679" ], "note": "Exception wording is drawn from the provision but not yet checked verbatim against the official text.", "related_packages": [ "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-25-controller", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-30-controller", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-32-controller", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-33-controller", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-35-controller", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-28-processor", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-32-processor", "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-33-processor" ], "related_obligations": [ "obligation:eu:gdpr-art-25-controller", "obligation:eu:gdpr-art-30-controller", "obligation:eu:gdpr-art-32-controller", "obligation:eu:gdpr-art-33-controller", "obligation:eu:gdpr-art-35-controller", "obligation:eu:gdpr-art-28-processor", "obligation:eu:gdpr-art-32-processor", "obligation:eu:gdpr-art-33-processor" ], "related_exemptions": [ "exception:eu:gdpr-household" ], "related_cases": [ "eu:c-798-24", "eu:c-474-24", "eu:c-199-24-62024cj0199" ], "related_authorities": [ "Competent supervisory authority" ], "related_statistics": [ "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr", "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr" ], "last_changed": "2026-10-06", "change_type": "new_package", "change_reason": "First publication of the package.", "previous_hash": null, "precedent_strength": "leading", "leading_cases": [ "eu:c-798-24", "eu:c-474-24", "eu:c-199-24-62024cj0199" ], "contradicting_cases": [], "basis": "37 judgments in the register for gdpr.", "token_estimate": 169, "retrieval_equivalent_tokens_saved": 22031, "estimated_source_documents": 7, "method": "token_estimate = characters/4 of the frozen core. Retrieval equivalent: provision 1200, judgment 6000, sanction 600 tokens each.", "usable_without_further_analysis": true, "gaps": [], "generative_output": false, "attribution": "Source: NovaCopilot", "links": { "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr-art-24-controller", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-24-controller", "exceptions": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr-art-24-controller", "timeline": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr--controller", "changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes?type=package", "index": "https://legal.exploreworldai.com/api/public/v1/agent-packages" }, "hash": "322c04752b0d2a96a333d16a665531717b3726776167e7698b0759f90c1888a4" }, "links": { "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr-art-24-controller", "case_law": { "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr-art-24-controller", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr-art-24-controller" }, "evidence": { "provenance": null, "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-24-controller?view=compact", "representations": {}, "machine_languages": [ "en", "sv" ], "ref": "eu:gdpr-art-24-controller" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:47d32f6615c8393b007605d4c8b996f8d5fe9b47b531f69affacf3a6eb597cbc", "version": "legal-2026-10-06", "expires": "2026-10-07T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-06+legal-2026-10-06+2026-10-06T18:34:25", "content_hash": "sha256:47d32f6615c8393b007605d4c8b996f8d5fe9b47b531f69affacf3a6eb597cbc", "revalidate_after": "2026-10-06T19:57:21.847Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr-art-24-controller", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }