Primäre Rechtsquellen prüfen

Primary Legal Source Verification

Base every legal requirement and compliance claim on verified primary legal sources and official supervisory guidance. Never invent statutes, articles, regulatory opinions, or court rulings, and never cite a source whose relevant text you have not verified.

Source Hierarchy & Verification Protocol

1. Prioritize Primary & Authoritative Sources:
   • Primary legislation: Official statutory repositories (EUR-Lex for EU regulations/directives, official national gazettes and consolidated legislative databases).
   • Binding decisions & case law: CJEU rulings, national supreme/constitutional courts, and binding supervisory decisions (EDPB binding decisions, Commission Implementing Decisions on SCCs or Adequacy).
   • Official supervisory guidance: EDPB guidelines and recommendations, national data protection authorities (NAIH, BfDI/DSK, CNIL, ICO), consumer protection authorities, and AI Office guidance.
2. Verify Temporal Validity & Scope:
   • Check the consolidation date, entry into force, application date, and any transitional or phased-in provisions (such as staggered application dates under the EU AI Act or national transposition deadlines for EU directives).
   • Distinguish clearly between:
     • Currently enforceable law
     • Adopted law in a transitional period (noting the exact application date)
     • Proposed or draft legislation
3. Classify Normative Force:
   • For every requirement, record whether it is:
     • Mandatory statutory rule (cannot be waived by contract)
     • Default statutory rule (applies unless validly modified, e.g., in B2B contracts)
     • Supervisory authority interpretation / best practice
     • Commercial or operational policy choice

Source Citation Record

In the internal source register, record for each substantive requirement:

• Instrument & exact provision: Official title, number, and exact article/paragraph/point.
• Jurisdiction & scope: EU/EEA, specific Member State, UK, US state, and whether directives require national transposition check.
• Verification date & status: Date checked and current entry-into-force status.
• Product mapping: Which product feature, data flow, or document clause the provision governs.

Guardrails

• Never treat secondary blog posts, marketing summaries, or another company's privacy policy as a primary legal source; use them only as search leads to locate the statute or official guidance.
• When statutory interpretation is unsettled or depends on national case law nuances, state the uncertainty transparently and formulate a focused question for qualified legal counsel.