{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":null,"checked_against":null},"truncation":{"shown":3,"total":3,"capped":false,"cap":1000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/33","url":"https://www.headlesslaw.com/gdpr/articles/33","title":"Article 33 — Notification of a personal data breach to the supervisory authority","work_id":"gdpr","date_state":"past","as_of":"2018-05-25","relations_url":"https://www.headlesslaw.com/gdpr/articles/33/relations"},"as_of":"2018-05-25","counts":{"refers_to:out":1,"refers_to:in":2},"relations":[{"edge_id":"e041c4db66127a0ac5a4","scope":"unit","type":"refers_to","direction":"out","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 55","dst_raw":"eu.gdpr.article.55","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/55","url":"/gdpr/articles/55","title":"Competence","key":"55","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.33","source_block_id":"eu.gdpr.article.33.paragraph.1"}},{"edge_id":"5b81a064c9b5f898d7f1","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 33(1)","dst_raw":"eu.gdpr.article.33","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/70/para/1/pt/g","url":"/gdpr/articles/70#p-1-g","title":"Tasks of the Board","key":"70(1)(g)","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.70","source_block_id":"eu.gdpr.article.70.paragraph.1.point.g"}},{"edge_id":"919a0d211532eab3d48c","scope":"unit","type":"refers_to","direction":"in","resolution":"resolved","basis":"explicit_legal_cross_reference","method":"extracted_relationships","confidence":"medium","src_from":"2016-05-04","src_until":null,"span":"Article 33(3)","dst_raw":"eu.gdpr.article.33","other":{"work_id":"gdpr","level":"L1","locator":"gdpr/art/34/para/2","url":"/gdpr/articles/34#p-2","title":"Communication of a personal data breach to the data subject","key":"34(2)","state_on_date":"in_force"},"evidence":{"object":"eu.gdpr.legal_text.article.34","source_block_id":"eu.gdpr.article.34.paragraph.2"}}],"not_served":["exempts","derogates_from"],"note":"inverse edges are computed from the stored direction; floating targets are resolved on as_of (other.state_on_date)"}