{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-06", "fingerprint": "ewai:se:09b38a", "proof": "sha256:e18ec8566457f76c5be6f12f3e3bc4acf7730b076364dcd58b8e48e67489da9b", "jurisdiction": "se", "lang": "en" }, "brand_source": "Source: NovaCopilot", "brand": { "product": "NovaCopilot", "platform": "ExploreWorldAI", "infrastructure": "ExploreWorld Legal", "infrastructure_url": "legal.exploreworldai.com", "legal_entity": "Valkiv Ventures AB", "permanent_url": "https://legal.exploreworldai.com/novacopilot", "source": "Source: NovaCopilot", "powered_by": "Powered by NovaCopilot", "license": "https://legal.exploreworldai.com/licensvillkor", "contact": "stig@valkiv.com" }, "object_type": "timeline", "object_id": "timeline:eu:gdpr", "schema_version": "1", "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/timeline", "url": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr", "judgment": { "id": "eu:gdpr", "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:gdpr" }, "siblings": { "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:gdpr", "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:gdpr", "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:gdpr", "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:gdpr", "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:gdpr", "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:gdpr", "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:gdpr", "edge": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:gdpr", "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:gdpr", "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:gdpr", "obligation": "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:gdpr", "sanction": "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:gdpr", "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:gdpr", "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:gdpr", "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr", "provision_link": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr", "brief": "https://legal.exploreworldai.com/api/public/v1/obj/brief/eu:gdpr", "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:gdpr", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr", "risk_chain": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:gdpr", "compliance_effect": "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr", "answer_node": "https://legal.exploreworldai.com/api/public/v1/obj/answer_node/eu:gdpr", "exception": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr", "package": "https://legal.exploreworldai.com/api/public/v1/obj/package/eu:gdpr", "case_kit": "https://legal.exploreworldai.com/api/public/v1/obj/case_kit/eu:gdpr", "documentation_requirement": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:gdpr", "sme_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:gdpr", "action_kit": "https://legal.exploreworldai.com/api/public/v1/obj/action_kit/eu:gdpr" }, "source": "NovaCopilot", "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:gdpr", "item": { "act": "gdpr", "jurisdiction": "eu", "dated": [ { "date": "2018-05-25", "kind": "application", "article": "99", "what": "Lawful basis, information duties, the rights of the person and the breach notification duty apply directly.", "who": "Every controller and processor that handles personal data of people in the union." } ], "relative_deadlines": [ { "obligation": "obligation:eu:gdpr-art-33-controller", "article": "33", "deadline": "72 hours", "deadline_note": "Not later than 72 hours after becoming aware, where feasible.", "starts_when": [ "element:gdpr:personal-data", "element:gdpr:controller" ], "report_to": "Competent supervisory authority" }, { "obligation": "obligation:eu:gdpr-art-12-controller", "article": "12", "deadline": "30 days", "deadline_note": "Within one month of receipt of the request; may be extended by two further months where necessary, taking into account the complexity and number of the requests, with the data subject informed within one month (Art. 12(3)).", "starts_when": [ "element:gdpr:personal-data", "element:gdpr:controller" ], "report_to": "Data subject" } ], "status_today": { "date": "2026-10-06", "in_application": true, "next_milestone": null }, "links": { "exceptions": "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:gdpr", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr", "obligations": [ "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-33-controller", "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:gdpr-art-12-controller" ] }, "hash": "18aad495c761a75e56da370642b2be0a7281e2b7ed587698d5b46d4aa9422dcb" }, "links": { "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:gdpr", "case_law": { "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:gdpr", "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:gdpr" }, "evidence": { "provenance": null, "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify", "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes" }, "compact": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr?view=compact", "representations": {}, "machine_languages": [ "en", "sv" ], "ref": "eu:gdpr" }, "watch": { "changes": "https://legal.exploreworldai.com/api/public/v1/changes", "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu", "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.", "recheck_after_seconds": 86400 }, "hash": "sha256:e18ec8566457f76c5be6f12f3e3bc4acf7730b076364dcd58b8e48e67489da9b", "version": "legal-2026-10-06", "expires": "2026-10-07T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-06+legal-2026-10-06+2026-10-06T16:51:49", "content_hash": "sha256:e18ec8566457f76c5be6f12f3e3bc4acf7730b076364dcd58b8e48e67489da9b", "revalidate_after": "2026-10-06T19:07:35.666Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:gdpr", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }