{
  "total": 22,
  "limit": 500,
  "offset": 0,
  "act": null,
  "read_at": "2026-08-31",
  "freshness": {
    "index": 82,
    "readAt": "2026-08-31",
    "ageDays": 16,
    "cadenceDays": 30,
    "nextCheck": "2026-09-30",
    "state": "fresh",
    "stateLabel": "Färsk"
  },
  "corpus_version": "legal-2026-08-25",
  "generated_at": "2026-09-16T12:07:45.522Z",
  "next_update": "2026-09-17T00:00:00.000Z",
  "acts_with_recitals": 3,
  "acts_in_register": 32,
  "items": [
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 39,
      "article": "5",
      "note": "The Article 5 principles made concrete: lawfulness, transparency and that the data subject knows of the processing.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-5",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-5",
      "read_at": "2026-08-31",
      "node_hash": "67d4ad5e0b64b6a8"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 42,
      "article": "7",
      "note": "The burden of proving valid consent rests on the controller.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-7",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-7",
      "read_at": "2026-08-31",
      "node_hash": "6d6c5f74e50e76be"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 47,
      "article": "6",
      "note": "Legitimate interest can carry direct marketing and security processing, but always requires balancing.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-6",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-6",
      "read_at": "2026-08-31",
      "node_hash": "74f5bd956af9b339"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 60,
      "article": "13",
      "note": "The information duty must be clear and accessible, adapted in particular to children.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-13",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-13",
      "read_at": "2026-08-31",
      "node_hash": "6aba970144abb6a0"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 71,
      "article": "22",
      "note": "Automated decisions: a right to human intervention, to express a point of view and to contest; profiling of children should not occur.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-22",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-22",
      "read_at": "2026-08-31",
      "node_hash": "51805849fb34b6fe"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 83,
      "article": "32",
      "note": "The security level is tested against the risk: pseudonymisation and encryption are named as measures.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-32",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-32",
      "read_at": "2026-08-31",
      "node_hash": "6ae279ee173cde8f"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 85,
      "article": "33",
      "note": "What a personal data breach is and when it is likely to result in risk — the basis of the 72-hour duty.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-33",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-33",
      "read_at": "2026-08-31",
      "node_hash": "d9c84047412e4c3e"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 90,
      "article": "35",
      "note": "When an impact assessment is required: systematic monitoring, sensitive data at scale and new technology.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-35",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-35",
      "read_at": "2026-08-31",
      "node_hash": "6d6a6ff97ac4830c"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 108,
      "article": "46",
      "note": "Safeguards for third-country transfers: standard contractual clauses and binding corporate rules.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-46",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-46",
      "read_at": "2026-08-31",
      "node_hash": "a265ebabbfb81610"
    },
    {
      "act": "gdpr",
      "celex": "32016R0679",
      "recital": 148,
      "article": "83",
      "note": "Fines must be effective, proportionate and dissuasive in each individual case.",
      "path": "/eu/rattsakter/gdpr-2016-679/artikel-83",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-83",
      "read_at": "2026-08-31",
      "node_hash": "ac09719232cbe1a1"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 27,
      "article": "6",
      "note": "The high-risk classification: product safety legislation and Annex III as the two tracks.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-6",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-6",
      "read_at": "2026-08-31",
      "node_hash": "27555072e2f18222"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 28,
      "article": "5",
      "note": "Why manipulation and exploitation of vulnerability are banned: practices that undermine free choice.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-5",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-5",
      "read_at": "2026-08-31",
      "node_hash": "d00ac96983addf01"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 44,
      "article": "5",
      "note": "The carve-outs for law-enforcement biometric identification: strict proportionality and judicial review.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-5",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-5",
      "read_at": "2026-08-31",
      "node_hash": "d00ac96983addf01"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 89,
      "article": "9",
      "note": "The risk-management system as a continuous process over the system's whole lifecycle.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-9",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-9",
      "read_at": "2026-08-31",
      "node_hash": "4152087d8a1a08fd"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 97,
      "article": "17",
      "note": "Quality management systems for providers: documentation, allocation of responsibility and compliance control.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-17",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-17",
      "read_at": "2026-08-31",
      "node_hash": "e788df5081467f26"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 105,
      "article": "43",
      "note": "Conformity assessment: for which high-risk systems self-assessment suffices and when a notified body is required.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-43",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-43",
      "read_at": "2026-08-31",
      "node_hash": "23a8d1876f6ce8b9"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 109,
      "article": "49",
      "note": "Registration in the EU database: what information must be given and who has access.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-49",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-49",
      "read_at": "2026-08-31",
      "node_hash": "fb2c1e8d5e25bd57"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 132,
      "article": "50",
      "note": "The transparency duties: the user must know when it interacts with an AI system or synthetic content.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-50",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-50",
      "read_at": "2026-08-31",
      "node_hash": "cd76449b8e651353"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 109,
      "article": "71",
      "note": "The EU database's function as the public register of high-risk systems.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-71",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-71",
      "read_at": "2026-08-31",
      "node_hash": "df9ce430b09bbf2a"
    },
    {
      "act": "ai-act",
      "celex": "32024R1689",
      "recital": 165,
      "article": "99",
      "note": "The penalties: turnover-based fines must be dissuasive even for the largest actors.",
      "path": "/eu/rattsakter/ai-act-2024-1689/artikel-99",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-99",
      "read_at": "2026-08-31",
      "node_hash": "c0ff2066a9e49c2c"
    },
    {
      "act": "dora",
      "celex": "32022R2554",
      "recital": 41,
      "article": "17",
      "note": "Incident reporting: harmonised formats and short deadlines for major ICT incidents.",
      "path": "/eu/rattsakter/dora-2022-2554/artikel-17",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dora-2022-2554/artikel-17",
      "read_at": "2026-08-31",
      "node_hash": "9a651a01f00be162"
    },
    {
      "act": "dora",
      "celex": "32022R2554",
      "recital": 74,
      "article": "28",
      "note": "Third-party risk: concentration risk among critical ICT providers is monitored at union level.",
      "path": "/eu/rattsakter/dora-2022-2554/artikel-28",
      "canonical": "https://legal.exploreworldai.com/eu/rattsakter/dora-2022-2554/artikel-28",
      "read_at": "2026-08-31",
      "node_hash": "f05c1e3ff846e526"
    }
  ],
  "open_eu": {
    "base": "https://legal.exploreworldai.com/api/public/v1/open/eu",
    "acts": "https://legal.exploreworldai.com/api/public/v1/open/eu/acts",
    "articles": "https://legal.exploreworldai.com/api/public/v1/open/eu/articles",
    "citations": "https://legal.exploreworldai.com/api/public/v1/open/eu/citations",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/open/eu/freshness",
    "recitals": "https://legal.exploreworldai.com/api/public/v1/open/eu/recitals",
    "timelines": "https://legal.exploreworldai.com/api/public/v1/open/eu/timelines",
    "obligations": "https://legal.exploreworldai.com/api/public/v1/open/eu/obligations",
    "pages": {
      "recitals": "https://legal.exploreworldai.com/novacopilot/eu-skal",
      "timelines": "https://legal.exploreworldai.com/novacopilot/eu-tidslinjer",
      "obligations": "https://legal.exploreworldai.com/novacopilot/eu-skyldigheter"
    },
    "pages_fr": {
      "home": "https://legal.exploreworldai.com/fr",
      "recitals": "https://legal.exploreworldai.com/fr/novacopilot/eu-considerants",
      "timelines": "https://legal.exploreworldai.com/fr/novacopilot/eu-calendriers",
      "obligations": "https://legal.exploreworldai.com/fr/novacopilot/eu-obligations"
    },
    "terms": {
      "price": "free",
      "key_required": false,
      "rate_limit": "none",
      "updated": "daily",
      "rights": [
        "use",
        "cite",
        "index",
        "cache"
      ],
      "restrictions": [
        "no resale of the dataset as such"
      ],
      "attribution": "ExploreWorld Legal, legal.exploreworldai.com",
      "contains": "EU acts and articles: identifier, CELEX, title, address, reading date, hash, citation string, freshness",
      "excludes": "article body text, reasoning surfaces, bulk extraction, agent surfaces, judgments, national implementation"
    }
  },
  "open_data": {
    "base": "https://legal.exploreworldai.com/api/public/v1/open",
    "delta": "https://legal.exploreworldai.com/api/public/v1/open/delta",
    "nodes": "https://legal.exploreworldai.com/api/public/v1/open/nodes",
    "citations": "https://legal.exploreworldai.com/api/public/v1/open/citations",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/open/freshness",
    "terms": {
      "price": "free",
      "key_required": false,
      "rate_limit": "none",
      "updated": "daily",
      "rights": [
        "use",
        "cite",
        "index",
        "cache"
      ],
      "restrictions": [
        "no resale of the dataset as such"
      ],
      "attribution": "ExploreWorld Legal, legal.exploreworldai.com",
      "contains": "addresses, layers, hashes, reading dates and citation strings",
      "excludes": "full body text, reasoning surfaces, bulk extraction, agent surfaces"
    }
  }
}