Search GDPR Articles Programmatically via API

The GDPR has 99 articles and 173 recitals. Finding the right provision for a specific question means searching EUR-Lex, reading cross-references, and interpreting legal text. Gibs provides a REST API that answers GDPR questions with specific article citations — send a question in plain English, get a structured answer with the exact articles that apply.

The Problem

GDPR questions come up constantly in development: "Do we need consent for this?", "What's required for international data transfers?", "Does Article 22 apply to our scoring system?" Developers either ask the legal team (slow), Google it (unreliable), or search EUR-Lex directly (tedious). No programmatic tool exists for querying GDPR articles with structured, cited responses.

How Gibs Solves This

import gibs

client = gibs.Client(api_key="sk-gibs-...")

result = client.check(
    question="What are the legal bases for processing personal data under GDPR?",
    regulations=["gdpr"]
)

print(result.answer)
# "Article 6(1) provides six legal bases for processing personal data:
#  (a) consent, (b) contractual necessity, (c) legal obligation,
#  (d) vital interests, (e) public interest, (f) legitimate interests..."

print(result.sources)
# ["Article 6(1)(a)", "Article 6(1)(b)", "Article 6(1)(c)",
#  "Article 6(1)(d)", "Article 6(1)(e)", "Article 6(1)(f)"]

import { Gibs } from '@gibs-dev/sdk'

const gibs = new Gibs({ apiKey: 'sk-gibs-...' })

const result = await gibs.check({
  question: 'When is a Data Protection Impact Assessment required?',
  regulations: ['gdpr']
})
// Sources: ["Article 35(1)", "Article 35(3)", "Recital 91"]

Every answer includes article-level citations verified against the source regulation text. Gibs cites specific articles and paragraphs, not just chapter headings.

What's Indexed

| Component | Count | Coverage | |-----------|-------|----------| | Articles | 99 | Full text, all paragraphs | | Recitals | 173 | Full text | | Chapters | 11 | Structure and context | | Total chunks | 276 | Complete GDPR corpus |

Cross-references to the AI Act and DORA are included when relevant — a question about automated decision-making returns GDPR Article 22 and AI Act Article 14 together.

Common GDPR Queries

Questions developers ask that Gibs answers with specific articles:

| Question | Key Articles | |----------|-------------| | Legal basis for processing? | Article 6 | | When is consent required? | Articles 6(1)(a), 7, 8 | | Data subject access rights? | Articles 15-20 | | Right to erasure? | Article 17 | | International data transfers? | Articles 44-49 | | When is a DPO required? | Article 37 | | When is a DPIA required? | Article 35 | | Automated decision-making rights? | Article 22 | | Data breach notification? | Articles 33, 34 | | Processor obligations? | Article 28 |

Who This Is For

Gibs is for searching GDPR content programmatically. It is not a consent management platform or cookie banner tool.

Try It Now

Free tier: 50 requests/month.

curl -X POST https://api.gibs.dev/v1/check \
  -H "Authorization: Bearer sk-gibs-..." \
  -H "Content-Type: application/json" \
  -d '{"question": "What are the GDPR requirements for processing children'\''s data?", "regulations": ["gdpr"]}'

Get your API key | Read the docs | Python SDK | npm package

FAQ

How accurate is Gibs on GDPR questions?

Gibs indexes the complete GDPR text — 99 articles and 173 recitals in 276 chunks. Every answer includes specific article citations verified against the source text. Cross-regulation accuracy (GDPR + AI Act) is supported through the cross-reference graph.

Can I query specific GDPR articles?

Yes. You can ask about specific articles ("What does GDPR Article 35 require?") or ask general questions ("When do I need a DPIA?") — Gibs identifies and cites the relevant articles either way.

Does Gibs cover GDPR guidelines from EDPB?

The current GDPR corpus covers the regulation text itself — all articles and recitals. EDPB guidelines and national DPA guidance are planned for future indexing.

Can I search GDPR and other regulations together?

Yes. Gibs supports cross-regulation queries. A question about AI systems processing personal data returns obligations from both GDPR and the AI Act. A question about ICT incidents at a financial institution returns both GDPR Article 33 (breach notification) and DORA Article 19 (incident reporting).

What format does the API return?

JSON with structured fields: answer text, source citations (specific article and paragraph numbers), confidence score, and regulation version. Every citation references a specific provision, not just a chapter or section heading.

Is there a way to use Gibs in AI assistants?

Yes. Gibs provides an MCP (Model Context Protocol) server at mcp.gibs.dev. AI coding assistants can call Gibs directly to answer GDPR questions within your development environment.

Last updated: 2026-02-19