{
  "type": "decision_object_list",
  "schema_version": 1,
  "count": 24,
  "decision_objects": [
    {
      "id": "decision-object:eu:ai-act~deployer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "ai-act",
      "role": "deployer",
      "question": "Must a deployer comply with AI-ACT, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:ai-act:high-risk"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:ai-act-art-26-deployer",
          "duty": "Use the system in line with the instructions and assign human oversight.",
          "article": "26",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-27-deployer",
          "duty": "Carry out a fundamental rights impact assessment where required.",
          "article": "27",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:ai-act-art-26-deployer",
          "obligation:eu:ai-act-art-27-deployer"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "risk_objects": [
          "risk-object:eu:ai-act-art-99-4"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "AI Act: Regulation (EU) 2024/1689",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "c9581dd10bd294a1f6b3f9052418cd254ad036c1b401fe3d273d80e108ff75f0",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aai-act~deployer"
    },
    {
      "id": "decision-object:eu:ai-act~distributor",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "ai-act",
      "role": "distributor",
      "question": "Must a distributor comply with AI-ACT, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:ai-act-art-24-distributor",
          "duty": "Verify marking and documentation before making available on the market.",
          "article": "24",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:ai-act-art-24-distributor"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "risk_objects": [
          "risk-object:eu:ai-act-art-99-4"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "AI Act: Regulation (EU) 2024/1689",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "3fec9881d9e5cd9b82b03ed9578df7e4c2aec99d87eef7b87108c657add80b30",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aai-act~distributor"
    },
    {
      "id": "decision-object:eu:ai-act~gpai-provider",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "ai-act",
      "role": "gpai-provider",
      "question": "Must a gpai-provider comply with AI-ACT, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:ai-act-art-53-gpai-provider",
          "duty": "Keep model documentation and a copyright policy for general-purpose AI models.",
          "article": "53",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-55-gpai-provider",
          "duty": "Meet the additional obligations for models with systemic risk.",
          "article": "55",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:ai-act-art-53-gpai-provider",
          "obligation:eu:ai-act-art-55-gpai-provider"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-101"
        ],
        "risk_objects": [
          "risk-object:eu:ai-act-art-101"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "AI Act: Regulation (EU) 2024/1689",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "8ef6183835040db693133771e1f3ee686660a94f5a2d9d5c4c945558b61b4436",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aai-act~gpai-provider"
    },
    {
      "id": "decision-object:eu:ai-act~importer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "ai-act",
      "role": "importer",
      "question": "Must a importer comply with AI-ACT, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:ai-act-art-23-importer",
          "duty": "Verify conformity, documentation and marking before placing on the market.",
          "article": "23",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:ai-act-art-23-importer"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "risk_objects": [
          "risk-object:eu:ai-act-art-99-4"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "AI Act: Regulation (EU) 2024/1689",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "82450201a8c1e3f0b5e59240078480f56a1b2b62485041b46bc31078037c34cf",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aai-act~importer"
    },
    {
      "id": "decision-object:eu:ai-act~provider",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "ai-act",
      "role": "provider",
      "question": "Must a provider comply with AI-ACT, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:ai-act:ai-system",
        "element:ai-act:high-risk",
        "element:ai-act:provider"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:ai-act-art-16-provider",
          "duty": "Meet the provider obligations for high-risk AI systems.",
          "article": "16",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-9-provider",
          "duty": "Establish and maintain a risk management system.",
          "article": "9",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-10-provider",
          "duty": "Apply data and data governance requirements to training, validation and testing data.",
          "article": "10",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-11-provider",
          "duty": "Draw up and keep technical documentation.",
          "article": "11",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-12-provider",
          "duty": "Enable automatic recording of events (logging).",
          "article": "12",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-17-provider",
          "duty": "Operate a quality management system.",
          "article": "17",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-43-provider",
          "duty": "Carry out the applicable conformity assessment before placing on the market.",
          "article": "43",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-72-provider",
          "duty": "Run post-market monitoring of the system in use.",
          "article": "72",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:ai-act-art-73-provider",
          "duty": "Report serious incidents to the market surveillance authority.",
          "article": "73",
          "deadline_hours": null,
          "deadline_days": 15
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:ai-act-art-16-provider",
          "obligation:eu:ai-act-art-9-provider",
          "obligation:eu:ai-act-art-10-provider",
          "obligation:eu:ai-act-art-11-provider",
          "obligation:eu:ai-act-art-12-provider",
          "obligation:eu:ai-act-art-17-provider",
          "obligation:eu:ai-act-art-43-provider",
          "obligation:eu:ai-act-art-72-provider",
          "obligation:eu:ai-act-art-73-provider"
        ],
        "sanctions": [
          "sanction:eu:ai-act-art-99-4"
        ],
        "risk_objects": [
          "risk-object:eu:ai-act-art-99-4"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "AI Act: Regulation (EU) 2024/1689",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "c0b0bf62fc75428d2a6ed85e33c5b5b990486b2439c1d102069cb869848e9b6e",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aai-act~provider"
    },
    {
      "id": "decision-object:eu:amlr~obliged-entity",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "amlr",
      "role": "obliged-entity",
      "question": "Must a obliged-entity comply with AMLR, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:amlr-art-9-obliged-entity",
          "duty": "Have internal policies, procedures and controls to mitigate money laundering and terrorist financing risks.",
          "article": "9",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-10-obliged-entity",
          "duty": "Carry out and keep up to date a business-wide risk assessment.",
          "article": "10",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-11-obliged-entity",
          "duty": "Appoint a member of the management body responsible for compliance and a compliance officer.",
          "article": "11",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-20-obliged-entity",
          "duty": "Apply customer due diligence measures, including identification of the customer and beneficial owner.",
          "article": "20",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-34-obliged-entity",
          "duty": "Apply enhanced due diligence measures in higher-risk situations.",
          "article": "34",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-69-obliged-entity",
          "duty": "Report suspicions to the financial intelligence unit.",
          "article": "69",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:amlr-art-77-obliged-entity",
          "duty": "Retain customer due diligence records and transaction evidence for five years.",
          "article": "77",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:amlr-art-9-obliged-entity",
          "obligation:eu:amlr-art-10-obliged-entity",
          "obligation:eu:amlr-art-11-obliged-entity",
          "obligation:eu:amlr-art-20-obliged-entity",
          "obligation:eu:amlr-art-34-obliged-entity",
          "obligation:eu:amlr-art-69-obliged-entity",
          "obligation:eu:amlr-art-77-obliged-entity"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Anti-Money Laundering Regulation: Regulation (EU) 2024/1624",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1624/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "4bdbf6572954e1d52d0ac82f03b98daf4b3ecc4cde332318cad1f639bfe1affb",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aamlr~obliged-entity"
    },
    {
      "id": "decision-object:eu:data-act~cloud-provider",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "data-act",
      "role": "cloud-provider",
      "question": "Must a cloud-provider comply with DATA-ACT, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:data-act-art-23-cloud-provider",
          "duty": "Remove obstacles to switching between data processing services.",
          "article": "23",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:data-act-art-23-cloud-provider"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Data Act: Regulation (EU) 2023/2854",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "6be986da204e3579ff2b775440678728df91ca8ed2587ecbd08ec9e783382f0e",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adata-act~cloud-provider"
    },
    {
      "id": "decision-object:eu:data-act~data-holder",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "data-act",
      "role": "data-holder",
      "question": "Must a data-holder comply with DATA-ACT, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:data-act-art-4-data-holder",
          "duty": "Make product and related service data available to the user.",
          "article": "4",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:data-act-art-4-data-holder"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Data Act: Regulation (EU) 2023/2854",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "b333a1072328bc1fc38c5bec29559d5e46de128b8ee15bbc252b83fb05b176fd",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adata-act~data-holder"
    },
    {
      "id": "decision-object:eu:dga~data-intermediary",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "dga",
      "role": "data-intermediary",
      "question": "Must a data-intermediary comply with DGA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:dga-art-12-data-intermediary",
          "duty": "Meet the conditions for providing data intermediation services.",
          "article": "12",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:dga-art-12-data-intermediary"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Data Governance Act: Regulation (EU) 2022/868",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2022/868/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "58f4694875fb773c167e19f4a107af9ffed14b163baeb1d2a52b35d02041268e",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adga~data-intermediary"
    },
    {
      "id": "decision-object:eu:dora~financial-entity",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "dora",
      "role": "financial-entity",
      "question": "Must a financial-entity comply with DORA, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:dora:ict-risk"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:dora-art-5-financial-entity",
          "duty": "The management body defines, approves and oversees the ICT risk management framework and bears ultimate responsibility for it.",
          "article": "5",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-6-financial-entity",
          "duty": "Maintain a sound, comprehensive and documented ICT risk management framework.",
          "article": "6",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-11-financial-entity",
          "duty": "Put in place an ICT business continuity policy with response and recovery plans.",
          "article": "11",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-17-financial-entity",
          "duty": "Define and implement an ICT-related incident management process.",
          "article": "17",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-19-financial-entity",
          "duty": "Report major ICT-related incidents to the competent authority.",
          "article": "19",
          "deadline_hours": 24,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-24-financial-entity",
          "duty": "Establish a digital operational resilience testing programme.",
          "article": "24",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-26-financial-entity",
          "duty": "Carry out threat-led penetration testing where identified by the competent authority.",
          "article": "26",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-28-financial-entity",
          "duty": "Manage ICT third-party risk and keep a register of information on all ICT service contracts.",
          "article": "28",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dora-art-30-financial-entity",
          "duty": "Include the key contractual provisions in contracts with ICT third-party service providers.",
          "article": "30",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:dora-art-5-financial-entity",
          "obligation:eu:dora-art-6-financial-entity",
          "obligation:eu:dora-art-11-financial-entity",
          "obligation:eu:dora-art-17-financial-entity",
          "obligation:eu:dora-art-19-financial-entity",
          "obligation:eu:dora-art-24-financial-entity",
          "obligation:eu:dora-art-26-financial-entity",
          "obligation:eu:dora-art-28-financial-entity",
          "obligation:eu:dora-art-30-financial-entity"
        ],
        "sanctions": [
          "sanction:eu:dora-art-50",
          "sanction:eu:dora-art-35-6"
        ],
        "risk_objects": [
          "risk-object:eu:dora-art-50",
          "risk-object:eu:dora-art-35-6"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "DORA: Regulation (EU) 2022/2554",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "59f0c2a39dfe5448efdd77834a026d884de73ce00007633699d8d5aaf6de270e",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adora~financial-entity"
    },
    {
      "id": "decision-object:eu:dsa~hosting-service",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "dsa",
      "role": "hosting-service",
      "question": "Must a hosting-service comply with DSA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:dsa-art-16-hosting-service",
          "duty": "Operate a notice and action mechanism.",
          "article": "16",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dsa-art-17-hosting-service",
          "duty": "Give a statement of reasons for every restriction.",
          "article": "17",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:dsa-art-16-hosting-service",
          "obligation:eu:dsa-art-17-hosting-service"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Digital Services Act: Regulation (EU) 2022/2065",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "3005d2ece01880569c86a8e9c450723cd3a02fde651095c717d24285ab239238",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adsa~hosting-service"
    },
    {
      "id": "decision-object:eu:dsa~very-large-platform",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "dsa",
      "role": "very-large-platform",
      "question": "Must a very-large-platform comply with DSA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:dsa-art-34-very-large-platform",
          "duty": "Assess systemic risks stemming from the service.",
          "article": "34",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:dsa-art-35-very-large-platform",
          "duty": "Put mitigation measures in place for identified systemic risks.",
          "article": "35",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:dsa-art-34-very-large-platform",
          "obligation:eu:dsa-art-35-very-large-platform"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Digital Services Act: Regulation (EU) 2022/2065",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "c01e9f24be905cb6bbef3851b075084367a57d825416d60418bc32bd1f76916d",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Adsa~very-large-platform"
    },
    {
      "id": "decision-object:eu:gdpr~controller",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "gdpr",
      "role": "controller",
      "question": "Must a controller comply with GDPR, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:gdpr:automated-decision",
        "element:gdpr:controller",
        "element:gdpr:personal-data",
        "element:gdpr:processing",
        "element:gdpr:special-categories"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:gdpr-art-24-controller",
          "duty": "Implement and demonstrate measures that make processing compliant.",
          "article": "24",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-25-controller",
          "duty": "Apply data protection by design and by default.",
          "article": "25",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-30-controller",
          "duty": "Keep records of processing activities.",
          "article": "30",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-32-controller",
          "duty": "Ensure a level of security appropriate to the risk.",
          "article": "32",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-33-controller",
          "duty": "Notify a personal data breach to the supervisory authority.",
          "article": "33",
          "deadline_hours": 72,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-35-controller",
          "duty": "Carry out a data protection impact assessment for high-risk processing.",
          "article": "35",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-5-controller",
          "duty": "Process personal data in line with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and be able to demonstrate compliance (accountability).",
          "article": "5",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-6-controller",
          "duty": "Process personal data only where at least one legal basis in Article 6(1) applies.",
          "article": "6",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-12-controller",
          "duty": "Provide information on action taken on a data subject request under Articles 15 to 22 without undue delay and in any event within one month of receipt of the request.",
          "article": "12",
          "deadline_hours": null,
          "deadline_days": 30
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-15-controller",
          "duty": "Give the data subject confirmation as to whether personal data concerning him or her are being processed, access to the personal data and the information listed in Article 15(1), and a copy of the data.",
          "article": "15",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-17-controller",
          "duty": "Erase personal data without undue delay where one of the grounds in Article 17(1) applies.",
          "article": "17",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:gdpr-art-24-controller",
          "obligation:eu:gdpr-art-25-controller",
          "obligation:eu:gdpr-art-30-controller",
          "obligation:eu:gdpr-art-32-controller",
          "obligation:eu:gdpr-art-33-controller",
          "obligation:eu:gdpr-art-35-controller",
          "obligation:eu:gdpr-art-5-controller",
          "obligation:eu:gdpr-art-6-controller",
          "obligation:eu:gdpr-art-12-controller",
          "obligation:eu:gdpr-art-15-controller",
          "obligation:eu:gdpr-art-17-controller"
        ],
        "sanctions": [
          "sanction:eu:gdpr-art-83-4",
          "sanction:eu:gdpr-art-83-5",
          "sanction:eu:gdpr-art-58-2"
        ],
        "risk_objects": [
          "risk-object:eu:gdpr-art-83-4",
          "risk-object:eu:gdpr-art-83-5",
          "risk-object:eu:gdpr-art-58-2"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "GDPR: Regulation (EU) 2016/679",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
          },
          {
            "source": "Regulation (EU) 2016/679 (GDPR)",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "4d3034fb47c67b5c780a0a9179e0efaed5c4830537451b6ef287baa2dc0d04e4",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Agdpr~controller"
    },
    {
      "id": "decision-object:eu:gdpr~processor",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "gdpr",
      "role": "processor",
      "question": "Must a processor comply with GDPR, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:gdpr:personal-data",
        "element:gdpr:processing",
        "element:gdpr:processor"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:gdpr-art-28-processor",
          "duty": "Process only on documented instructions under a written contract.",
          "article": "28",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-32-processor",
          "duty": "Ensure a level of security appropriate to the risk.",
          "article": "32",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:gdpr-art-33-processor",
          "duty": "Notify the controller without undue delay after becoming aware of a breach.",
          "article": "33",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:gdpr-art-28-processor",
          "obligation:eu:gdpr-art-32-processor",
          "obligation:eu:gdpr-art-33-processor"
        ],
        "sanctions": [
          "sanction:eu:gdpr-art-83-4",
          "sanction:eu:gdpr-art-58-2"
        ],
        "risk_objects": [
          "risk-object:eu:gdpr-art-83-4",
          "risk-object:eu:gdpr-art-58-2"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "GDPR: Regulation (EU) 2016/679",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "298b576b35d780c3d2dc8919093212624541cede01e8b2db5a36f43945c2c5fa",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Agdpr~processor"
    },
    {
      "id": "decision-object:eu:mica~art-issuer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "mica",
      "role": "art-issuer",
      "question": "Must a art-issuer comply with MICA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:mica-art-36-art-issuer",
          "duty": "Constitute and maintain a reserve of assets for asset-referenced tokens.",
          "article": "36",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:mica-art-36-art-issuer"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "MiCA: Regulation (EU) 2023/1114",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "2fbceae95c1a2dd4a0d9a93f3a1c936c66cea3829b62b0e3d1d407caaf5fe55c",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Amica~art-issuer"
    },
    {
      "id": "decision-object:eu:mica~casp",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "mica",
      "role": "casp",
      "question": "Must a casp comply with MICA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:mica-art-59-casp",
          "duty": "Obtain authorisation as a crypto-asset service provider, unless an exempt entity such as a credit institution notifies.",
          "article": "59",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:mica-art-66-casp",
          "duty": "Act honestly, fairly and professionally in the best interests of clients.",
          "article": "66",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:mica-art-68-casp",
          "duty": "Maintain governance arrangements, including fit and proper management.",
          "article": "68",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:mica-art-70-casp",
          "duty": "Safeguard clients' crypto-assets and funds.",
          "article": "70",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:mica-art-72-casp",
          "duty": "Identify, prevent, manage and disclose conflicts of interest.",
          "article": "72",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:mica-art-59-casp",
          "obligation:eu:mica-art-66-casp",
          "obligation:eu:mica-art-68-casp",
          "obligation:eu:mica-art-70-casp",
          "obligation:eu:mica-art-72-casp"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "MiCA: Regulation (EU) 2023/1114",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "c160e5e20773301e1df9e480067acde4e5bc2f57e8894109f7c2c4d2853e87cd",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Amica~casp"
    },
    {
      "id": "decision-object:eu:mica~emt-issuer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "mica",
      "role": "emt-issuer",
      "question": "Must a emt-issuer comply with MICA, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:mica-art-48-emt-issuer",
          "duty": "Issue e-money tokens only as an authorised credit institution or electronic money institution and publish a white paper.",
          "article": "48",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:mica-art-48-emt-issuer"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "MiCA: Regulation (EU) 2023/1114",
            "source_url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "e4b82a37d26557af9eaa073e0beca85c83902f1a3f1888fabf32bf0a215ce3c3",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Amica~emt-issuer"
    },
    {
      "id": "decision-object:eu:nis2~essential-entity",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "nis2",
      "role": "essential-entity",
      "question": "Must a essential-entity comply with NIS2, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:nis2:essential-entity",
        "element:nis2:significant-incident"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:nis2-art-21-essential-entity",
          "duty": "Take appropriate cybersecurity risk-management measures.",
          "article": "21",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:nis2-art-23-essential-entity",
          "duty": "Report significant incidents within the set deadlines.",
          "article": "23",
          "deadline_hours": 24,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:nis2-art-21-essential-entity",
          "obligation:eu:nis2-art-23-essential-entity"
        ],
        "sanctions": [
          "sanction:eu:nis2-art-34-4",
          "sanction:eu:nis2-art-34-5"
        ],
        "risk_objects": [
          "risk-object:eu:nis2-art-34-4",
          "risk-object:eu:nis2-art-34-5"
        ]
      },
      "evidence": {
        "sources": [
          {
            "source": "NIS2: Directive (EU) 2022/2555",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [],
      "sha256": "1194c7930772dfcf579d13cd6dd2a8b13d2e508b1891794eb364e57731f8c1d7",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Anis2~essential-entity"
    },
    {
      "id": "decision-object:eu:nis2~management-body",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "nis2",
      "role": "management-body",
      "question": "Must a management-body comply with NIS2, and what must it do?",
      "outcome": "depends",
      "conditions": [
        "element:nis2:essential-entity"
      ],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:nis2-art-20-management-body",
          "duty": "Approve the risk-management measures and follow training.",
          "article": "20",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:nis2-art-20-management-body"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "NIS2: Directive (EU) 2022/2555",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "88967244e0c26552623e18b8cb6e75634b42b681aeb69822f5ecd84acce7d382",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Anis2~management-body"
    },
    {
      "id": "decision-object:eu:pay-transparency~employer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "pay-transparency",
      "role": "employer",
      "question": "Must a employer comply with PAY-TRANSPARENCY, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:pay-transparency-art-9-employer",
          "duty": "Report on the gender pay gap between female and male workers.",
          "article": "9",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:pay-transparency-art-9-employer"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Directive (EU) 2023/970, Article 9",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2023/970/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "a971bcca9a31c2f9e602a2e62c5609f4ce3d4316d9a664e5132567dc9e341a34",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Apay-transparency~employer"
    },
    {
      "id": "decision-object:eu:psd2~payment-service-provider",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "psd2",
      "role": "payment-service-provider",
      "question": "Must a payment-service-provider comply with PSD2, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:psd2-art-73-payment-service-provider",
          "duty": "Refund the payer for an unauthorised payment transaction.",
          "article": "73",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:psd2-art-95-payment-service-provider",
          "duty": "Manage operational and security risks of payment services.",
          "article": "95",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:psd2-art-96-payment-service-provider",
          "duty": "Report major operational or security incidents to the competent authority.",
          "article": "96",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:psd2-art-97-payment-service-provider",
          "duty": "Apply strong customer authentication.",
          "article": "97",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:psd2-art-73-payment-service-provider",
          "obligation:eu:psd2-art-95-payment-service-provider",
          "obligation:eu:psd2-art-96-payment-service-provider",
          "obligation:eu:psd2-art-97-payment-service-provider"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "PSD2: Directive (EU) 2015/2366",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2015/2366/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "1102d693505c60f071039626f12e70e188e8153ca64e63ac3bfeb0d37262e06f",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Apsd2~payment-service-provider"
    },
    {
      "id": "decision-object:eu:transparent-working-conditions~employer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "transparent-working-conditions",
      "role": "employer",
      "question": "Must a employer comply with TRANSPARENT-WORKING-CONDITIONS, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:transparent-working-conditions-art-5-employer",
          "duty": "Provide the worker with the essential aspects of the employment relationship in writing.",
          "article": "5",
          "deadline_hours": null,
          "deadline_days": 7
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:transparent-working-conditions-art-5-employer"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Directive (EU) 2019/1152, Article 5",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2019/1152/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "1f394a5463515d65205d62540b3c4aa252cfb56272f8b1754020861ca8e85f52",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Atransparent-working-conditions~employer"
    },
    {
      "id": "decision-object:eu:vat-directive~taxable-person",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "vat-directive",
      "role": "taxable-person",
      "question": "Must a taxable-person comply with VAT-DIRECTIVE, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:vat-directive-art-220-taxable-person",
          "duty": "Issue an invoice for supplies of goods or services to other taxable persons.",
          "article": "220",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:vat-directive-art-222-taxable-person",
          "duty": "Issue the invoice for intra-Community supplies no later than the fifteenth day of the month following the chargeable event.",
          "article": "222",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:vat-directive-art-250-taxable-person",
          "duty": "Submit a VAT return setting out the information needed to calculate the tax.",
          "article": "250",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:vat-directive-art-262-taxable-person",
          "duty": "Submit a recapitulative statement of intra-Community supplies.",
          "article": "262",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:vat-directive-art-220-taxable-person",
          "obligation:eu:vat-directive-art-222-taxable-person",
          "obligation:eu:vat-directive-art-250-taxable-person",
          "obligation:eu:vat-directive-art-262-taxable-person"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Directive 2006/112/EC, Article 220",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2006/112/oj"
          },
          {
            "source": "Directive 2006/112/EC, Article 222",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2006/112/oj"
          },
          {
            "source": "Directive 2006/112/EC, Articles 250 and 252",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2006/112/oj"
          },
          {
            "source": "Directive 2006/112/EC, Article 262",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2006/112/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "f9d483440f0dc294f93e1f73ba997ad73dcda90a675686ed0504b9b4a3b2cdab",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Avat-directive~taxable-person"
    },
    {
      "id": "decision-object:eu:working-time~employer",
      "type": "decision_object",
      "schema_version": 1,
      "jurisdiction": "eu",
      "act": "working-time",
      "role": "employer",
      "question": "Must a employer comply with WORKING-TIME, and what must it do?",
      "outcome": "yes",
      "conditions": [],
      "next_actions": [
        {
          "obligation_id": "obligation:eu:working-time-art-6-employer",
          "duty": "Ensure average working time does not exceed 48 hours per seven-day period, including overtime.",
          "article": "6",
          "deadline_hours": null,
          "deadline_days": null
        },
        {
          "obligation_id": "obligation:eu:working-time-art-7-employer",
          "duty": "Give every worker paid annual leave of at least four weeks.",
          "article": "7",
          "deadline_hours": null,
          "deadline_days": null
        }
      ],
      "chain": {
        "obligations": [
          "obligation:eu:working-time-art-6-employer",
          "obligation:eu:working-time-art-7-employer"
        ],
        "sanctions": [],
        "risk_objects": []
      },
      "evidence": {
        "sources": [
          {
            "source": "Directive 2003/88/EC, Article 6",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2003/88/oj"
          },
          {
            "source": "Directive 2003/88/EC, Article 7",
            "source_url": "https://eur-lex.europa.eu/eli/dir/2003/88/oj"
          }
        ],
        "read_at": "2026-08-31",
        "precedent": "not_in_register"
      },
      "gaps": [
        "sanction: not_in_register"
      ],
      "sha256": "0cd49848189997c6393cdfb5d2af828f2027b2d1627d8b62dc53e4e748ffe07a",
      "source": "NovaCopilot",
      "url": "https://legal.exploreworldai.com/api/public/v1/decide?id=decision-object%3Aeu%3Aworking-time~employer"
    }
  ],
  "gaps": [],
  "source": "NovaCopilot",
  "attribution": "Source: NovaCopilot"
}