Data protection in the EU
Data protection rests on three questions that return in every audit: who decides the purpose, where does the data end up, and who supervises. This page goes through all three, with a path to the articles in the register.
NovaCopilot · ExploreWorld Legal
European and Nordic law as verifiable data, with source, reading date and checksum on every row.
- Publisher
- NovaCopilot, ExploreWorld Legal
- Corpus version
- legal-2026-10-01
- Read at
- 2026-08-31
- Freshness
- 85/100
Responsibility
- Whoever decides purpose and means is the controller, regardless of who operates the technology.
- A processor acts only on documented instruction, and the contract must reflect that.
- Joint control requires an arrangement on who answers to the data subject.
Transfers
- A transfer to a third country requires an adequacy decision or appropriate safeguards.
- Standard contractual clauses do not suffice alone: the assessment of the recipient country must be documented.
- Access from a third country counts as a transfer, even when the server stands in the EU.
Supervision
- Every country has a supervisory authority; the register names the authority per jurisdiction.
- Cross-border processing is handled by a lead authority together with the concerned ones.
- Fines follow the nature of the infringement, not the willingness to fix it afterwards.
The NovaCopilot models
The decision model
In: A role, a legal act and the situation in plain words.
Out: The obligations that reach the role, the article behind them and what remains.
When: When the question is whether a requirement applies to you, and why.
The difference model
In: A checksum already used and the date of the last reading.
Out: What changed since then: checksum, reading date, passed deadline and rows to revisit.
When: When earlier work is reused and has to be checked first.
The obligation model
In: A legal act or an article, with or without a role filter.
Out: The obligation in the register's wording, the role it reaches, canonical address and reading date.
When: When the answer has to be citable article by article.
Example for an agent
curl -s "https://legal.exploreworldai.com/novacopilot/eu-dataskydd?format=agent"- canonical, the address to cite
- node_hash, the checksum for the next comparison
- corpus_version, the corpus version that answered
- freshness.read_at, the reading date of the row
- freshness.next_check, when a new check is reasonable
- citation.string, the finished citation
- agent.receipt, the receipt of the call, without a key
Metadata
- Canonical address
- https://legal.exploreworldai.com/novacopilot/eu-dataskydd
- Layer
- index
- Read at
- 2026-08-31
- Freshness
- 85/100
- Checksum
- d5cdd04412c1c623
- Corpus version
- legal-2026-10-01
- Next check
- -
- License
- https://legal.exploreworldai.com/revision
How to cite this page
NovaCopilot (ExploreWorld Legal, Valkiv Ventures AB), https://legal.exploreworldai.com/novacopilot/eu-dataskydd, read 2026-08-31, checksum d5cdd04412c1c623, corpus version legal-2026-10-01, license https://legal.exploreworldai.com/revision
- Owner
- Valkiv Ventures AB
- License
- https://legal.exploreworldai.com/revision
- Checksum
- d5cdd04412c1c623
- Fingerprint
- ewai:eu:0b92e8
- Terms
- Use, cite, index and cache. The register as such is not resold.
Source registers
The same material as registers, with read date and source on every row.
FAQ
- Does the register cover national application?
- The register names the supervisory authority per jurisdiction and the national instruments we have actually read. Lines we have not read are marked unread rather than guessed.
- Are the articles available as data?
- Yes. Act, article number, heading, address, reading date and hash sit in the EU data catalogue, free and without a key.
- How often is the layer re-read?
- The EU layer was last re-read on 2026-08-31. The freshness file shows the index per act and when the next check is scheduled.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.