{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":null,"checked_against":null},"truncation":{"shown":8,"total":8,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/28","url":"https://www.headlesslaw.com/gdpr/articles/28","title":"Article 28 — Processor","work_id":"gdpr","date_state":"past","as_of":"2018-05-25","relations_url":"https://www.headlesslaw.com/gdpr/articles/28/relations"},"as_of":"2018-05-25","counts":{"refers_to:out":5,"refers_to:in":3},"relations":[{"edge_id":"f68ea1427b9a22735c5f","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 93(2)","dst_raw":"eu.gdpr.article.93","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/93","url":"/gdpr/articles/93","title":"Committee procedure","key":"93","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.28","source_block_id":"eu.gdpr.article.28.paragraph.7"}},{"edge_id":"7bacc8232dbfd80a6740","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 32","dst_raw":"eu.gdpr.article.32","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/32","url":"/gdpr/articles/32","title":"Security of processing","key":"32","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.28","source_block_id":"eu.gdpr.article.28.paragraph.3.point.c"}},{"edge_id":"597fc6457cffadbd31bf","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 63","dst_raw":"eu.gdpr.article.63","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/63","url":"/gdpr/articles/63","title":"Consistency mechanism","key":"63","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.28","source_block_id":"eu.gdpr.article.28.paragraph.8"}},{"edge_id":"37b3410a8ac70870da4b","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 42","dst_raw":"eu.gdpr.article.42","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/42","url":"/gdpr/articles/42","title":"Certification","key":"42","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.28","source_block_id":"eu.gdpr.article.28.paragraph.5"}},{"edge_id":"3bd79cf1af8213f659a0","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 40","dst_raw":"eu.gdpr.article.40","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/40","url":"/gdpr/articles/40","title":"Codes of conduct","key":"40","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.28","source_block_id":"eu.gdpr.article.28.paragraph.5"}},{"edge_id":"505e584aa0a888380b79","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 28(8)","dst_raw":"eu.gdpr.article.28","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/64/para/1/pt/d","url":"/gdpr/articles/64#p-1-d","title":"Opinion of the Board","key":"64(1)(d)","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.64","source_block_id":"eu.gdpr.article.64.paragraph.1.point.d"}},{"edge_id":"9c5429d606bc3f080ccb","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 28(8)","dst_raw":"eu.gdpr.article.28","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/58/para/3/pt/g","url":"/gdpr/articles/58#p-3-g","title":"Powers","key":"58(3)(g)","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.58","source_block_id":"eu.gdpr.article.58.paragraph.3.point.g"}},{"edge_id":"d1d6e64c26982f9f34e8","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 28(8)","dst_raw":"eu.gdpr.article.28","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/57/para/1/pt/j","url":"/gdpr/articles/57#p-1-j","title":"Tasks","key":"57(1)(j)","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.57","source_block_id":"eu.gdpr.article.57.paragraph.1.point.j"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}