Amendment 325· Data Act Article 32y
+Addition
Text of the amendment
As tabled
Wording it would add
5a.Member States shall remain responsible for establishing and operating a single, integrated national reporting portal for all statutory reporting obligations, including, as a minimum, notifications under the Cyber Resilience Act (CRA), the NIS 2 Directive, the CER Directive, the DORA Regulation, the eIDAS Regulation and the GDPR.
Those national reporting portals are designed to be interoperable on the basis of uniform functional and technical requirements set by ENISA.
The national reporting portals provide for interoperable, automated and secure transmission of relevant notifications to competent authorities in other Member States and/or to ENISA, where this is necessary under Union law or national law.
ENISA performs a supporting and coordinating role in promoting interoperability, standardisation and quality assurance, without becoming responsible for central storage or processing of all incident notifications at Union level.
Data Act Article 32y with this amendment
Amendment 325 applied to the Commission proposal, no other amendment
Unchanged: (1), (2), (3), (4) and (5)
Public sector bodies which allow re-use of certain categories of protected data may charge fees for allowing the re-use of such data.
Where public sector bodies charge fees, they shall take measures to provide incentives for the re-use of certain categories of protected data for non-commercial purposes, such as scientific research purposes, and by start-ups, SMEs and SMCs in accordance with Union State aid rules. In that regard, public sector bodies may also make the data available at a discounted fee or free of charge, in particular to start- ups, SMEs and SMCs, civil society, research and educational establishments. To that end, public sector bodies may establish a list of categories of re-users to which data or documents for re-use is made available at a discounted fee or free of charge. That list, together with the criteria used to establish it, shall be made public.
Any fees shall be derived from the costs related to conducting the procedure for requests for the re-use of certain categories of protected data and limited to the necessary costs in relation to:
the reproduction, provision and dissemination of data;
the clearance of rights;
anonymisation or other forms of preparation of personal data and commercially confidential data as provided for in Article 32w(3)[conditions for re-use];
the maintenance of the secure processing environment;
the acquisition of the right to allow re-use in accordance with this Section by third parties outside the public sector; and assisting re-users in seeking consent from data subjects and permission from data holders whose rights and interests may be affected by such re-use.
The criteria and methodology for calculating fees shall be laid down by the Member States and published. The public sector body shall publish a description of the main categories of costs and the rules used for the allocation of costs.
Public sector bodies may charge higher fees than those allowed in accordance with paragraph 2 and 3 of this Article with respect to very large enterprises, based on objective criteria, taking into account the economic power, or the ability of the entity to acquire data, including in particular a designation as a gatekeeper under Regulation (EU) 2022/1925. Any such calculated fees shall be proportionate. In addition to the elements listed in paragraph 3 of this Article, they can cover the cost of collection and production of the data, together with a reasonable return on investment.
Member States shall remain responsible for establishing and operating a single, integrated national reporting portal for all statutory reporting obligations, including, as a minimum, notifications under the Cyber Resilience Act (CRA), the NIS 2 Directive, the CER Directive, the DORA Regulation, the eIDAS Regulation and the GDPR.
Those national reporting portals are designed to be interoperable on the basis of uniform functional and technical requirements set by ENISA.
The national reporting portals provide for interoperable, automated and secure transmission of relevant notifications to competent authorities in other Member States and/or to ENISA, where this is necessary under Union law or national law.
ENISA performs a supporting and coordinating role in promoting interoperability, standardisation and quality assurance, without becoming responsible for central storage or processing of all incident notifications at Union level.
+NewTarget
Wording of the targeted provisionlaw in force, Commission proposal, latest Council text
Commission proposalCOM(2025) 837
Article 32y Fees (1) Public sector bodies which allow re-use of certain categories of protected data may charge fees for allowing the re-use of such data. (2) Where public sector bodies charge fees, they shall take measures to provide incentives for the re-use of certain categories of protected data for non-commercial purposes, such as scientific research purposes, and by start-ups, SMEs and SMCs in accordance with Union State aid rules. In that regard, public sector bodies may also make the data available at a discounted fee or free of charge, in particular to start-ups, SMEs and SMCs, civil society, research and educational establishments. To that end, public sector bodies may establish a list of categories of re-users to which data or documents for re-use is made available at a discounted fee or free of charge. That list, together with the criteria used to establish it, shall be made public. (3) Any fees shall be derived from the costs related to conducting the procedure for requests for the re-use of certain categories of protected data and limited to the necessary costs in relation to: (a) the reproduction, provision and dissemination of data; (b) the clearance of rights; (c) anonymisation or other forms of preparation of personal data and commercially confidential data as provided for in Article 32w(3)[conditions for re-use]; (d) the maintenance of the secure processing environment; (e) the acquisition of the right to allow re-use in accordance with this Section by third parties outside the public sector; and assisting re-users in seeking consent from data subjects and permission from data holders whose rights and interests may be affected by such re-use. (4) The criteria and methodology for calculating fees shall be laid down by the Member States and published. The public sector body shall publish a description of the main categories of costs and the rules used for the allocation of costs. (5) Public sector bodies may charge higher fees than those allowed in accordance with paragraph 2 and 3 of this Article with respect to very large enterprises, based on objective criteria, taking into account the economic power, or the ability of the entity to acquire data, including in particular a designation as a gatekeeper under Regulation (EU) 2022/1925. Any such calculated fees shall be proportionate. In addition to the elements listed in paragraph 3 of this Article, they can cover the cost of collection and production of the data, together with a reasonable return on investment.
Council text of 22 October 2026ST 14756/26
Article 32y Fees for the re-use of certain categories of protected data (1) Public sector bodies which allow re-use of certain categories of protected data may charge fees for allowing the re-use of such data.
(2)Where fees are charged, Member States shall take measures to provide incentives for the re-use of certain categories of protected data for non-commercial purposes, such as scientific research purposes, and by start-ups, SMEs and SMCs in accordance with Union State aid rules. In that regard, public sector bodies may make the data available at a discounted fee or free of charge, in particular to start-ups, SMEs and SMCs, civil society, research and educational establishments. To that end, a list of categories of re-users to which data for re-use is made available at a discounted fee or free of charge may be established. That list, together with the criteria used to establish it, shall be made public.
(3)Any fees shall be derived from the costs related to conducting the procedure for requests for the re-use of certain categories of protected data and limited to the necessary costs in relation to:
(a)the reproduction, provision and dissemination of data;
(b)the clearance of rights;
(c)anonymisation of personal data and preparation of commercially confidential data as provided for in Article 32w(3);
(d)the maintenance of the secure processing environment;
(e)the acquisition of the right to allow re-use in accordance with this Section by third parties outside the public sector; and
(f)assisting re-users in seeking consent from data subjects and permission from data holders whose rights and interests may be affected by such re-use.
(4)The criteria and methodology for calculating fees shall be laid down by the Member States and published. The public sector body shall publish a description of the main categories of costs and the rules used for the allocation of costs.
(5)Public sector bodies may charge higher fees than those allowed in accordance with paragraph 2 and 3 of this Article with respect to very large enterprises, based on objective criteria, taking into account the economic power, or the ability of the entity to acquire data, including in particular a designation as a gatekeeper under Regulation (EU) 2022/1925. Any such calculated fees shall be proportionate. In addition to the elements listed in paragraph 3 of this Article, they can cover the cost of collection and production of the data, together with a reasonable return on investment.
Cite this amendment
Amendment 325 (Virginie Joron), European Parliament, Committee on the Internal Market and Consumer Protection, amendments 125–328 to the draft opinion on COM(2025) 837 (IMCO-AM-790905, PE790.905, 16 July 2026), pp. 156–157
Link, short form and official text
Amendment 325 (Virginie Joron), European Parliament, Committee on the Internal Market and Consumer Protection, amendments 125–328 to the draft opinion on COM(2025) 837 (IMCO-AM-790905, PE790.905, 16 July 2026), pp. 156–157
IMCO Amendment 325 (IMCO-AM-790905), p. 156