Source directoryEuropean Union (EUR-Lex)OJ L 119, 04.05.2016

Regulation (EU) 2016/679 (GDPR), authentic Official Journal text

“Regulation (EU) 2016/679 (GDPR), authentic Official Journal text”. Publisher: European Union (EUR-Lex). Version used: OJ L 119, 04.05.2016. The Versatile AI Risk Assessment threat catalogue backs 8 of its 52 threats with this document, at 3 verified locations.

As of: July 2026 · Catalogue version 2026.07.17.3

Document details

Publisher: European Union (EUR-Lex)
Version used: OJ L 119, 04.05.2016
Year: not stated
Licence: not stated
Framework: GDPR

Open the original document at the publisher External link; the publisher’s version always takes precedence.

References in the catalogue (3)

Every row states the clause, its title, the exact location in the document and the threats that refer to it.

Clauses of this document with the threats that reference them
Clause	Title and location	Referencing threats
`Article 25(1)–(2)`	Data protection by design and by default Article 25(1) and 25(2)	Supply Chain – Datasets Privacy Attacks Sensitive Information Disclosure Exfiltration from ML Application Cross-Tenant Leakage (Multi-Tenant Vector DB)Shadow AI (Unsanctioned AI Service Use)
`Article 32(1)(b)`	Security of processing Article 32(1)(b), read with Article 32(1) and 32(2)	Agent Memory Poisoning (Persistent Context)Insecure Inter-Agent Communication (A2A/MCP)
`Article 5(1)(d)`	Principles relating to processing of personal data — accuracy Article 5(1)(d)	Agent Memory Poisoning (Persistent Context)

This page does not reproduce the text of the standards. It states the identifier, title and location of the clause; the wording itself is in the original document. The mappings are taxonomic and not evidence of compliance.

Threats referencing this document (8)

Grouped by topic. Every entry leads to the full threat page.

Agentic and Autonomous AI

Privacy and Data Leakage

Reliability and Responsible Use

Shadow AI (Unsanctioned AI Service Use)

Supply Chain and Provenance

Supply Chain – Datasets

From the reference to the assessment

The full catalogue states the mitigations, the possible impact and every verified location for each threat. The live demo runs locally in your browser, with no sign-up.

Go to the threat catalogue Start the live demo

Cite this page

For reports, policies or internal documents; the link leads directly to this source page.

“Regulation (EU) 2016/679 (GDPR), authentic Official Journal text” (European Union (EUR-Lex)). References in the AI threat catalogue, Versatile AI Risk Assessment, as of July 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/sources/gdpr-2016-679/

← Back to the source directory