European Union. Data access / sharing. Regulation (EU)

DGARegulation (EU) 2022/868 on European data governance (Data Governance Act)

In force

§1Summary

Synopsis

Creates a framework for re-using certain protected public-sector data. It sets up a notification and neutrality regime for data intermediation services, and a voluntary registration regime for data altruism organisations.

Key themes
  • public sector data re-use
  • data intermediation services
  • data altruism
  • neutrality
  • international transfers of non-personal data
Unique features

It regulates 'data intermediaries' as a new kind of neutral market actor, and restricts transfers of protected non-personal data to third countries.

SaaS relevance

Applies if a SaaS platform's main purpose is to intermediate data-sharing between holders and users (notification and structural separation required).

§2Obligations

Extraterritorial
Yes
Breach notification
None
DPO
No
Cross-border transfers
Restrictions on transfers of protected non-personal public-sector data
Maximum penalty
Set by national law

§3Dates

Key dates
  • Adopted
  • In force
  • Applies from 2023-09-24. The Digital Omnibus proposes folding DGA provisions into the Data Act (pending).

§4Text and authority

Text
Authority
National competent authorities; European Data Innovation Board

§5Where it applies

Also applies in

§6Sources and verification

Sources consulted
Verification

High confidence.

The Omnibus consolidation proposal is pending.