{
  "total": 34,
  "limit": 500,
  "offset": 0,
  "role": null,
  "act": null,
  "roles": [
    "cloud-provider",
    "controller",
    "data-holder",
    "data-intermediary",
    "deployer",
    "distributor",
    "essential-entity",
    "gpai-provider",
    "hosting-service",
    "importer",
    "management-body",
    "processor",
    "provider",
    "very-large-platform"
  ],
  "read_at": "2026-08-31",
  "freshness": {
    "index": 82,
    "readAt": "2026-08-31",
    "ageDays": 16,
    "cadenceDays": 30,
    "nextCheck": "2026-09-30",
    "state": "fresh",
    "stateLabel": "Färsk"
  },
  "corpus_version": "legal-2026-08-25",
  "generated_at": "2026-09-16T12:07:44.515Z",
  "next_update": "2026-09-17T00:00:00.000Z",
  "items": [
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "16",
      "heading": "Obligations of providers of high-risk AI systems",
      "duty": "Meet the provider obligations for high-risk AI systems.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-16",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-16",
      "read_at": "2026-08-31",
      "node_hash": "3c9a5c7125858a79"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "9",
      "heading": "Risk management system",
      "duty": "Establish and maintain a risk management system.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-9",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-9",
      "read_at": "2026-08-31",
      "node_hash": "4152087d8a1a08fd"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "10",
      "heading": "Data and data governance",
      "duty": "Apply data and data governance requirements to training, validation and testing data.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-10",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-10",
      "read_at": "2026-08-31",
      "node_hash": "bd6c5ebf38d957cf"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "11",
      "heading": "Technical documentation",
      "duty": "Draw up and keep technical documentation.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-11",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-11",
      "read_at": "2026-08-31",
      "node_hash": "0b1ead46af56a7fc"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "12",
      "heading": "Record-keeping",
      "duty": "Enable automatic recording of events (logging).",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-12",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-12",
      "read_at": "2026-08-31",
      "node_hash": "3edef95d838f992d"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "17",
      "heading": "Quality management system",
      "duty": "Operate a quality management system.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-17",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-17",
      "read_at": "2026-08-31",
      "node_hash": "e788df5081467f26"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "43",
      "heading": "Conformity assessment",
      "duty": "Carry out the applicable conformity assessment before placing on the market.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-43",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-43",
      "read_at": "2026-08-31",
      "node_hash": "23a8d1876f6ce8b9"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "72",
      "heading": "Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems",
      "duty": "Run post-market monitoring of the system in use.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-72",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-72",
      "read_at": "2026-08-31",
      "node_hash": "c5e57f23111e9deb"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "provider",
      "article": "73",
      "heading": "Reporting of serious incidents",
      "duty": "Report serious incidents to the market surveillance authority.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-73",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-73",
      "read_at": "2026-08-31",
      "node_hash": "277fdf5a6e6510ac"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "deployer",
      "article": "26",
      "heading": "Obligations of deployers of high-risk AI systems",
      "duty": "Use the system in line with the instructions and assign human oversight.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-26",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-26",
      "read_at": "2026-08-31",
      "node_hash": "85a67f0804dc25d8"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "deployer",
      "article": "27",
      "heading": "Fundamental rights impact assessment for high-risk AI systems",
      "duty": "Carry out a fundamental rights impact assessment where required.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-27",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-27",
      "read_at": "2026-08-31",
      "node_hash": "1bda74899582c3d7"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "importer",
      "article": "23",
      "heading": "Obligations of importers",
      "duty": "Verify conformity, documentation and marking before placing on the market.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-23",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-23",
      "read_at": "2026-08-31",
      "node_hash": "f1b46d75ac66963b"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "distributor",
      "article": "24",
      "heading": "Obligations of distributors",
      "duty": "Verify marking and documentation before making available on the market.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-24",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-24",
      "read_at": "2026-08-31",
      "node_hash": "84a5c01213d17f7a"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "gpai-provider",
      "article": "53",
      "heading": "Obligations for providers of general-purpose AI models",
      "duty": "Keep model documentation and a copyright policy for general-purpose AI models.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-53",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-53",
      "read_at": "2026-08-31",
      "node_hash": "61880a08eba59c36"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "role": "gpai-provider",
      "article": "55",
      "heading": "Obligations of providers of general-purpose AI models with systemic risk",
      "duty": "Meet the additional obligations for models with systemic risk.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-55",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-55",
      "read_at": "2026-08-31",
      "node_hash": "a1a45dbea1a418d4"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "24",
      "heading": "Responsibility of the controller",
      "duty": "Implement and demonstrate measures that make processing compliant.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-24",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-24",
      "read_at": "2026-08-31",
      "node_hash": "cb757bd79eb86fcc"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "25",
      "heading": "Data protection by design and by default",
      "duty": "Apply data protection by design and by default.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-25",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-25",
      "read_at": "2026-08-31",
      "node_hash": "bfee697eaea715a5"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "30",
      "heading": "Records of processing activities",
      "duty": "Keep records of processing activities.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-30",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-30",
      "read_at": "2026-08-31",
      "node_hash": "b1705d44e9bb0929"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "32",
      "heading": "Security of processing",
      "duty": "Ensure a level of security appropriate to the risk.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-32",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-32",
      "read_at": "2026-08-31",
      "node_hash": "6ae279ee173cde8f"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "33",
      "heading": "Notification of a personal data breach to the supervisory authority",
      "duty": "Notify a personal data breach to the supervisory authority.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-33",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-33",
      "read_at": "2026-08-31",
      "node_hash": "d9c84047412e4c3e"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "controller",
      "article": "35",
      "heading": "Data protection impact assessment",
      "duty": "Carry out a data protection impact assessment for high-risk processing.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-35",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-35",
      "read_at": "2026-08-31",
      "node_hash": "6d6a6ff97ac4830c"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "processor",
      "article": "28",
      "heading": "Processor",
      "duty": "Process only on documented instructions under a written contract.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-28",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-28",
      "read_at": "2026-08-31",
      "node_hash": "f205aac3730ba898"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "processor",
      "article": "32",
      "heading": "Security of processing",
      "duty": "Ensure a level of security appropriate to the risk.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-32",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-32",
      "read_at": "2026-08-31",
      "node_hash": "6ae279ee173cde8f"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "role": "processor",
      "article": "33",
      "heading": "Notification of a personal data breach to the supervisory authority",
      "duty": "Notify the controller without undue delay after becoming aware of a breach.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-33",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-33",
      "read_at": "2026-08-31",
      "node_hash": "d9c84047412e4c3e"
    },
    {
      "act": "nis2",
      "celex": "32022L2555",
      "role": "essential-entity",
      "article": "21",
      "heading": "Cybersecurity risk-management measures",
      "duty": "Take appropriate cybersecurity risk-management measures.",
      "path": "/eu/rattsakter/nis2-2022-2555/artikel-21",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-21",
      "read_at": "2026-08-31",
      "node_hash": "7909e3a97faa6988"
    },
    {
      "act": "nis2",
      "celex": "32022L2555",
      "role": "essential-entity",
      "article": "23",
      "heading": "Reporting obligations",
      "duty": "Report significant incidents within the set deadlines.",
      "path": "/eu/rattsakter/nis2-2022-2555/artikel-23",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-23",
      "read_at": "2026-08-31",
      "node_hash": "69496f3b268a1baa"
    },
    {
      "act": "nis2",
      "celex": "32022L2555",
      "role": "management-body",
      "article": "20",
      "heading": "Governance",
      "duty": "Approve the risk-management measures and follow training.",
      "path": "/eu/rattsakter/nis2-2022-2555/artikel-20",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/nis2-2022-2555/artikel-20",
      "read_at": "2026-08-31",
      "node_hash": "62d63f28f0e593df"
    },
    {
      "act": "dsa",
      "celex": "32022R2065",
      "role": "hosting-service",
      "article": "16",
      "heading": "Notice and action mechanisms",
      "duty": "Operate a notice and action mechanism.",
      "path": "/eu/rattsakter/dsa-2022-2065/artikel-16",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dsa-2022-2065/artikel-16",
      "read_at": "2026-08-31",
      "node_hash": "483149d1d164d52c"
    },
    {
      "act": "dsa",
      "celex": "32022R2065",
      "role": "hosting-service",
      "article": "17",
      "heading": "Statement of reasons",
      "duty": "Give a statement of reasons for every restriction.",
      "path": "/eu/rattsakter/dsa-2022-2065/artikel-17",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dsa-2022-2065/artikel-17",
      "read_at": "2026-08-31",
      "node_hash": "0ca076b0fb215605"
    },
    {
      "act": "dsa",
      "celex": "32022R2065",
      "role": "very-large-platform",
      "article": "34",
      "heading": "Risk assessment",
      "duty": "Assess systemic risks stemming from the service.",
      "path": "/eu/rattsakter/dsa-2022-2065/artikel-34",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dsa-2022-2065/artikel-34",
      "read_at": "2026-08-31",
      "node_hash": "d2478779fb8a3148"
    },
    {
      "act": "dsa",
      "celex": "32022R2065",
      "role": "very-large-platform",
      "article": "35",
      "heading": "Mitigation of risks",
      "duty": "Put mitigation measures in place for identified systemic risks.",
      "path": "/eu/rattsakter/dsa-2022-2065/artikel-35",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dsa-2022-2065/artikel-35",
      "read_at": "2026-08-31",
      "node_hash": "5771d4b8467b3151"
    },
    {
      "act": "data-act",
      "celex": "32023R2854",
      "role": "data-holder",
      "article": "4",
      "heading": "The rights and obligations of users and data holders with regard to access, use and making available product data and related service data",
      "duty": "Make product and related service data available to the user.",
      "path": "/eu/rattsakter/dataforordningen-2023-2854/artikel-4",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dataforordningen-2023-2854/artikel-4",
      "read_at": "2026-08-31",
      "node_hash": "4bd9075408551f65"
    },
    {
      "act": "data-act",
      "celex": "32023R2854",
      "role": "cloud-provider",
      "article": "23",
      "heading": "Removing obstacles to effective switching",
      "duty": "Remove obstacles to switching between data processing services.",
      "path": "/eu/rattsakter/dataforordningen-2023-2854/artikel-23",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dataforordningen-2023-2854/artikel-23",
      "read_at": "2026-08-31",
      "node_hash": "5ce480e15d10941a"
    },
    {
      "act": "dga",
      "celex": "32022R0868",
      "role": "data-intermediary",
      "article": "12",
      "heading": "Conditions for providing data intermediation services",
      "duty": "Meet the conditions for providing data intermediation services.",
      "path": "/eu/rattsakter/datastyrningsforordningen-2022-868/artikel-12",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/datastyrningsforordningen-2022-868/artikel-12",
      "read_at": "2026-08-31",
      "node_hash": "d78c1e36182f3957"
    }
  ],
  "open_eu": {
    "base": "https://legal.exploreworldai.com/api/public/v1/open/eu",
    "acts": "https://legal.exploreworldai.com/api/public/v1/open/eu/acts",
    "articles": "https://legal.exploreworldai.com/api/public/v1/open/eu/articles",
    "citations": "https://legal.exploreworldai.com/api/public/v1/open/eu/citations",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/open/eu/freshness",
    "recitals": "https://legal.exploreworldai.com/api/public/v1/open/eu/recitals",
    "timelines": "https://legal.exploreworldai.com/api/public/v1/open/eu/timelines",
    "obligations": "https://legal.exploreworldai.com/api/public/v1/open/eu/obligations",
    "pages": {
      "recitals": "https://legal.exploreworldai.com/novacopilot/eu-skal",
      "timelines": "https://legal.exploreworldai.com/novacopilot/eu-tidslinjer",
      "obligations": "https://legal.exploreworldai.com/novacopilot/eu-skyldigheter"
    },
    "pages_fr": {
      "home": "https://legal.exploreworldai.com/fr",
      "recitals": "https://legal.exploreworldai.com/fr/novacopilot/eu-considerants",
      "timelines": "https://legal.exploreworldai.com/fr/novacopilot/eu-calendriers",
      "obligations": "https://legal.exploreworldai.com/fr/novacopilot/eu-obligations"
    },
    "terms": {
      "price": "free",
      "key_required": false,
      "rate_limit": "none",
      "updated": "daily",
      "rights": [
        "use",
        "cite",
        "index",
        "cache"
      ],
      "restrictions": [
        "no resale of the dataset as such"
      ],
      "attribution": "ExploreWorld Legal, legal.exploreworldai.com",
      "contains": "EU acts and articles: identifier, CELEX, title, address, reading date, hash, citation string, freshness",
      "excludes": "article body text, reasoning surfaces, bulk extraction, agent surfaces, judgments, national implementation"
    }
  },
  "open_data": {
    "base": "https://legal.exploreworldai.com/api/public/v1/open",
    "delta": "https://legal.exploreworldai.com/api/public/v1/open/delta",
    "nodes": "https://legal.exploreworldai.com/api/public/v1/open/nodes",
    "citations": "https://legal.exploreworldai.com/api/public/v1/open/citations",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/open/freshness",
    "terms": {
      "price": "free",
      "key_required": false,
      "rate_limit": "none",
      "updated": "daily",
      "rights": [
        "use",
        "cite",
        "index",
        "cache"
      ],
      "restrictions": [
        "no resale of the dataset as such"
      ],
      "attribution": "ExploreWorld Legal, legal.exploreworldai.com",
      "contains": "addresses, layers, hashes, reading dates and citation strings",
      "excludes": "full body text, reasoning surfaces, bulk extraction, agent surfaces"
    }
  }
}