Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
All regulations

GDPR

GDPR: Regulation (EU) 2016/679 · CELEX 32016R0679 · Applies from 2018-05-25

SVNODE

Summary

What is GDPR?
The EU data protection regulation governing processing of personal data.
Who is covered?
Anyone processing personal data of people in the EU, including non-EU companies targeting the EU.
When does it apply?
Applies since 25 May 2018.
What are the main obligations?
Lawful basis (art. 6), information to data subjects (art. 13), security (art. 32), breach notification within 72 hours (art. 33) and impact assessments for high-risk processing (art. 35).
What are the most common risks?
Missing lawful basis, late breach notification and inadequate security. Fines up to 20 million euro or 4 percent of global turnover (art. 83).
Which judgments affect the interpretation?
Court of Justice rulings on third-country transfers and legitimate interest shape the interpretation; see the case list below.

What changed today?

No real changes in the last day. Last checked 2026-10-16.

Machine-readable change feed

Who is affected?

Roles with verified obligations

Machine-readable feed: who is affected by today's changes

Key articles

GDPR art. 5GDPR art. 6GDPR art. 13GDPR art. 15GDPR art. 17GDPR art. 30GDPR art. 32GDPR art. 33GDPR art. 35GDPR art. 83Full act

Article agents

Each article as its own node with legal text, obligations, affected roles and the turnover framework the act sets.

GDPR Agent, art. 5GDPR Agent, art. 6GDPR Agent, art. 13GDPR Agent, art. 15GDPR Agent, art. 17GDPR Agent, art. 30GDPR Agent, art. 32GDPR Agent, art. 33GDPR Agent, art. 35GDPR Agent, art. 83All article agents

Agents

Case law and judgment chains

Source: NovaCopilot