{
  "primary_source": {
    "publisher": "EUR-Lex, Publications Office of the European Union",
    "identifier": "CELEX 32016R0679",
    "official_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679",
    "authoritative": true,
    "note": "The official publication is authoritative. The legislator is responsible for the content; NovaCopilot is responsible for traceability, check history, receipts and hashes."
  },
  "evidence_grade": "A",
  "evidence_grade_label": "Checked",
  "freshness": {
    "last_checked": "2026-10-30",
    "check_interval_days": 7,
    "source_type": "eu_law"
  },
  "id": "gdpr-by-design",
  "question": "What does data protection by design mean for our software or website under GDPR?",
  "framework": "GDPR",
  "articles": [
    {
      "ref": "gdpr:25",
      "title": "Data protection by design and by default",
      "status": "verified"
    }
  ],
  "depth": "brief",
  "answer": {
    "type": "source_excerpt",
    "ref": "GDPR Article 25",
    "text": "2. The controller shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed."
  },
  "sources": {
    "official": [
      "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32016R0679"
    ],
    "verified_at": [
      "2026-10-30"
    ]
  },
  "omitted": {},
  "next_depth": "https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-by-design?depth=standard",
  "source": "Source: NovaCopilot",
  "tokens": 207,
  "core_sha256": "80d8d9494bae88a34c7f478a8d1abe68eea220a25cdcef32bf41e2b9fbc75666",
  "license_scope": "public_index",
  "rules_url": "https://legal.exploreworldai.com/novacopilot/datakalla",
  "return_links": {
    "article_basis": [
      {
        "ref": "gdpr:25",
        "url": "https://legal.exploreworldai.com/api/public/v1/article-basis?act=gdpr&article=25"
      }
    ],
    "feeds": {
      "agent_answers": "https://legal.exploreworldai.com/feed/agentsvar.xml",
      "praxis_graph": "https://legal.exploreworldai.com/feed/praxisgraf.xml"
    },
    "formats": {
      "html": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design",
      "json": "https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-by-design",
      "brief": "https://legal.exploreworldai.com/api/public/v1/agent-answer/gdpr-by-design?depth=brief"
    },
    "canonical": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design",
    "cite_as": "NovaCopilot, \"What does data protection by design mean for our software or website under GDPR?\", https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design",
    "publisher": "NovaCopilot",
    "source": "Source: NovaCopilot",
    "refresh_note": "Re-fetch the canonical address; copies do not receive later verified changes."
  },
  "reader_formats": {
    "html": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design",
    "json": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design?format=json",
    "graph": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design?format=graph",
    "decision": "https://legal.exploreworldai.com/novacopilot/agentsvar/gdpr-by-design?format=decision"
  }
}