{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation:eu:gdpr-art-28-2-processor","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation:eu:gdpr-art-28-2-processor)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:shared:8acd9c","proof":"sha256:9c582a313d3d4a776b545521678b015d5933c99c3d1d819480fe23b01549a6b2","jurisdiction":"shared","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","schema_version":"1","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"id":"chain:obligation:eu:gdpr-art-28-2-processor","object_type":"obligation_chain","chain":"obligation → article → case → risk → status","obligation":{"obligation_id":"obligation:eu:gdpr-art-28-2-processor","act":"gdpr","role":"processor","duty":"Do not engage another processor without prior specific or general written authorisation of the controller, and inform the controller of intended changes so it can object.","deadline_days":null,"deadline_hours":null,"source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","hash":"90fcd657a97f2961bd0b652dfb0a693d93f70b52bd30598bc64fbd2befb981d7"},"article":{"act":"gdpr","article":"28(2)","source":"Regulation (EU) 2016/679 (GDPR)","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj"},"cases":{"via":"swedish_implementing_acts","statutes":[{"id":"dataskyddslagen","sfs":"2018:218","short":"Dataskyddslagen","law_graph":"https://legal.exploreworldai.com/api/public/v1/graph/law?act=dataskyddslagen"},{"id":"kamerabevakningslagen","sfs":"2018:1200","short":"Kamerabevakningslagen","law_graph":"https://legal.exploreworldai.com/api/public/v1/graph/law?act=kamerabevakningslagen"},{"id":"patientdatalagen","sfs":"2008:355","short":"Patientdatalagen","law_graph":"https://legal.exploreworldai.com/api/public/v1/graph/law?act=patientdatalagen"}],"total":11,"cases":[{"case_id":"se:hdo-mal-a-9385-25","identifier":"HDO mål nr Ä 9385-25","court":"Högsta domstolen","decided":"2026-06-12","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hdo-mal-a-9385-25","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hdo-mal-a-9385-25"},{"case_id":"se:hfd-2025-not-30","identifier":"HFD 2025 not. 30","court":"Högsta förvaltningsdomstolen","decided":"2025-06-18","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2025-not-30","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2025-not-30"},{"case_id":"se:nja-2025-10","identifier":"NJA 2025:10","court":"Högsta domstolen","decided":"2025-02-25","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:nja-2025-10","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:nja-2025-10"},{"case_id":"se:hfd-2024-30","identifier":"HFD 2024 ref. 30","court":"Högsta förvaltningsdomstolen","decided":"2024-05-15","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2024-30","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2024-30"},{"case_id":"se:hfd-2023-54","identifier":"HFD 2023 ref. 54","court":"Högsta förvaltningsdomstolen","decided":"2023-11-17","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2023-54","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2023-54"},{"case_id":"se:hfd-2023-6","identifier":"HFD 2023 ref. 6","court":"Högsta förvaltningsdomstolen","decided":"2023-02-06","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2023-6","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2023-6"},{"case_id":"se:hfd-2022-7","identifier":"HFD 2022 ref. 7","court":"Högsta förvaltningsdomstolen","decided":"2022-02-10","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2022-7","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2022-7"},{"case_id":"se:ad-2021-23","identifier":"AD 2021 nr 23","court":"Arbetsdomstolen","decided":"2021-05-26","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:ad-2021-23","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:ad-2021-23"},{"case_id":"se:ad-2018-48","identifier":"AD 2018 nr 48","court":"Arbetsdomstolen","decided":"2018-07-04","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:ad-2018-48","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:ad-2018-48"},{"case_id":"se:hfd-2017-67","identifier":"HFD 2017 ref. 67","court":"Högsta förvaltningsdomstolen","decided":"2017-12-04","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2017-67","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2017-67"},{"case_id":"se:hfd-2013-33","identifier":"HFD 2013 ref. 33","court":"Högsta förvaltningsdomstolen","decided":"2013-05-27","standing":"no_later_overruling_in_register","url":"https://legal.exploreworldai.com/api/public/v1/case-nodes/se:hfd-2013-33","timeline":"https://legal.exploreworldai.com/api/public/v1/case-timeline?id=se:hfd-2013-33"}],"coverage":"in_register"},"risk":{"case_reliance_levels":{"low":11,"medium":0,"high":0},"method":"https://legal.exploreworldai.com/api/public/v1/risk","compliance":{"id":"compliance:gdpr:processor","level":"low","score":2,"url":"https://legal.exploreworldai.com/api/public/v1/risk?id=compliance%3Agdpr%3Aprocessor"}},"sanctions":[{"sanction_id":"sanction:eu:gdpr-art-83-4","sanction_type":"administrative_fine","max_amount":"EUR 10 000 000","applies_from":"2018-05-25","url":"https://legal.exploreworldai.com/api/public/v1/sanction-chain?id=sanction%3Aeu%3Agdpr-art-83-4"},{"sanction_id":"sanction:eu:gdpr-art-58-2","sanction_type":"corrective_order","max_amount":null,"applies_from":"2018-05-25","url":"https://legal.exploreworldai.com/api/public/v1/sanction-chain?id=sanction%3Aeu%3Agdpr-art-58-2"}],"status":{"applies_from":"2018-05-25","in_application":true,"overruled_cases":0,"distinguished_cases":0},"sha256":"8615f89cf00479abc34ae188f13dad4e791d94c72272598ab8b9c40db4753550","hash_algorithm":"SHA-256 över id, object_type och kedjans kärna (JSON)","updated_at":"2026-11-02","stay_current":{"freshness":"https://legal.exploreworldai.com/api/public/v1/freshness","cursor":"MjAyNi0wOS0xMH5zZX52aXNzZWxibGFzYXJsYWdlbg","chain_hash":"fd38d19832eb7affda78d17d201da0d8dfc611287a87c2bba4b2dc2e198026cf","changes":"https://legal.exploreworldai.com/api/public/v1/changes/cursor?after=MjAyNi0wOS0xMH5zZX52aXNzZWxibGFzYXJsYWdlbg"},"permanent_url":"https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Agdpr-art-28-2-processor","cite_as":"Source: NovaCopilot, chain:obligation:eu:gdpr-art-28-2-processor, sha256 8615f89cf00479ab, https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Agdpr-art-28-2-processor","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","eu_cases":{"eu_cases_total":40,"eu_cases":[{"case_id":"eu:c-422-24","identifier":"C-422/24","ecli":"ECLI:EU:C:2025:980","court":"Court of Justice","decided":"2025-12-18","parties":"Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A980","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-422-24"},{"case_id":"eu:c-492-23","identifier":"C-492/23","ecli":"ECLI:EU:C:2025:935","court":"General Court","decided":"2025-12-02","parties":"X v Russmedia Digital SRL and Inform Media Press SRL","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A935","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-492-23"},{"case_id":"eu:c-655-23","identifier":"C-655/23","ecli":"ECLI:EU:C:2025:655","court":"General Court","decided":"2025-09-04","parties":"IP v Quirin Privatbank AG","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A655","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-655-23"},{"case_id":"eu:","identifier":"","ecli":"ECLI:EU:C:2025:303","court":"General Court","decided":"2025-04-30","parties":"Inspektorat kam Visshia sadeben savet","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A303","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:"},{"case_id":"eu:c-710-23","identifier":"C-710/23","ecli":"ECLI:EU:C:2025:231","court":"General Court","decided":"2025-04-03","parties":"L. H. v Ministerstvo zdravotnictví","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A231","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-710-23"},{"case_id":"eu:c-247-23","identifier":"C-247/23","ecli":"ECLI:EU:C:2025:172","court":"Court of Justice","decided":"2025-03-13","parties":"VP v Országos Idegenrendészeti Főigazgatóság","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A172","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-247-23"},{"case_id":"eu:c-203-22","identifier":"C-203/22","ecli":"ECLI:EU:C:2025:117","court":"General Court","decided":"2025-02-27","parties":"CK v Magistrat der Stadt Wien","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A117","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-203-22"},{"case_id":"eu:c-638-23","identifier":"C-638/23","ecli":"ECLI:EU:C:2025:127","court":"General Court","decided":"2025-02-27","parties":"Amt der Tiroler Landesregierung v Datenschutzbehörde","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A127","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-638-23"},{"case_id":"eu:c-383-23","identifier":"C-383/23","ecli":"ECLI:EU:C:2025:84","court":"Court of Justice","decided":"2025-02-13","parties":"Criminal proceedings against ILVA A/S","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A84","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-383-23"},{"case_id":"eu:c-416-23","identifier":"C-416/23","ecli":"ECLI:EU:C:2025:3","court":"Court of Justice","decided":"2025-01-09","parties":"Österreichische Datenschutzbehörde v F R","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A3","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-416-23"},{"case_id":"eu:c-394-23","identifier":"C-394/23","ecli":"ECLI:EU:C:2025:2","court":"Court of Justice","decided":"2025-01-09","parties":"Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2025%3A2","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-394-23"},{"case_id":"eu:c-65-23","identifier":"C-65/23","ecli":"ECLI:EU:C:2024:1051","court":"Court of Justice","decided":"2024-12-19","parties":"MK v K GmbH","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A1051","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-65-23"},{"case_id":"eu:c-169-23","identifier":"C-169/23","ecli":"ECLI:EU:C:2024:988","court":"Court of Justice","decided":"2024-11-28","parties":"Nemzeti Adatvédelmi és Információszabadság Hatóság v UC","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A988","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-169-23"},{"case_id":"eu:c-446-21","identifier":"C-446/21","ecli":"ECLI:EU:C:2024:834","court":"General Court","decided":"2024-10-04","parties":"Maximilian Schrems v Meta Platforms Ireland Limited","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A834","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-446-21"},{"case_id":"eu:c-507-23","identifier":"C-507/23","ecli":"ECLI:EU:C:2024:854","court":"General Court","decided":"2024-10-04","parties":"A v Patērētāju tiesību aizsardzības centrs","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A854","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-507-23"},{"case_id":"eu:c-621-22","identifier":"C-621/22","ecli":"ECLI:EU:C:2024:858","court":"General Court","decided":"2024-10-04","parties":"Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A858","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-621-22"},{"case_id":"eu:c-200-23","identifier":"C-200/23","ecli":"ECLI:EU:C:2024:827","court":"General Court","decided":"2024-10-04","parties":"Agentsia po vpisvaniyata v OL","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A827","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-200-23"},{"case_id":"eu:c-21-23","identifier":"C-21/23","ecli":"ECLI:EU:C:2024:846","court":"General Court","decided":"2024-10-04","parties":"ND v DR","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A846","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-21-23"},{"case_id":"eu:c-768-21","identifier":"C-768/21","ecli":"ECLI:EU:C:2024:785","court":"Court of Justice","decided":"2024-09-26","parties":"TR v Land Hessen","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A785","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-768-21"},{"case_id":"eu:","identifier":"","ecli":"ECLI:EU:C:2024:738","court":"Court of Justice","decided":"2024-09-12","parties":"HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A738","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:"},{"case_id":"eu:c-461-22","identifier":"C-461/22","ecli":"ECLI:EU:C:2024:607","court":"Court of Justice","decided":"2024-07-11","parties":"MK v WB","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A607","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-461-22"},{"case_id":"eu:c-757-22","identifier":"C-757/22","ecli":"ECLI:EU:C:2024:598","court":"General Court","decided":"2024-07-11","parties":"Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A598","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-757-22"},{"case_id":"eu:c-590-22","identifier":"C-590/22","ecli":"ECLI:EU:C:2024:536","court":"General Court","decided":"2024-06-20","parties":"AT and BT v PS GbR and Others","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A536","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-590-22"},{"case_id":"eu:mål c-182-22 och c-189-22","identifier":"Mål C-182/22 och C-189/22","ecli":"ECLI:EU:C:2024:531","court":"General Court","decided":"2024-06-20","parties":"JU and SO v Scalable Capital GmbH","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A531","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:mål c-182-22 och c-189-22"},{"case_id":"eu:c-312-23","identifier":"C-312/23","ecli":"ECLI:EU:C:2024:458","court":"Court of Justice","decided":"2024-05-27","parties":"Addiko Bank d.d. v Agencija za zaštitu osobnih podataka","curia_url":"https://curia.europa.eu/juris/liste.jsf?language=en&num=ECLI%3AEU%3AC%3A2024%3A458","text":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-312-23"}],"eu_cases_scope":"act_level: tolkar akten, inte nödvändigtvis just denna artikel","eu_cases_coverage":"court_tagged_in_register"},"hash":"sha256:9c582a313d3d4a776b545521678b015d5933c99c3d1d819480fe23b01549a6b2","version":"legal-2026-11-02","expires":"2026-11-02T12:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T08:29:46","content_hash":"sha256:9c582a313d3d4a776b545521678b015d5933c99c3d1d819480fe23b01549a6b2","revalidate_after":"2026-11-02T10:13:22.933Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation:eu:gdpr-art-28-2-processor","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/obligation-chain","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"action_kit":9},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"relationship","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-02T09:13:23.720Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/obligation-chain?id=obligation%3Aeu%3Agdpr-art-28-2-processor","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":5941}}