Amendment 772· Data Act Article 32f(5a) (new)
+Addition
Text of the amendment
As tabled
Wording it would add
(5a)Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.
Data Act Article 32f with this amendment
Amendment 772 applied to the Commission proposal, no other amendment
Unchanged: (1), (2), (3), (4) and (5)
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.
+NewJustification
Recognised data altruism organisations collect and make available data voluntarily provided for objectives of general interest, and thereby handle data whose exposure entails significant risks for the natural and legal persons concerned. In addition to the duty to inform data holders after the event, laid down in paragraph 4, such organisations should be required to take preventive measures. This provision requires them to implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them, and to apply state-of-the-art privacy-preserving and privacy-enhancing techniques where the data are processed or shared in pseudonymised or anonymised form. This reinforces the protection of data subjects and data holders and strengthens trust in data altruism, in line with the principles of integrity and confidentiality laid down in Regulation (EU) 2016/679.
Target
Wording of the targeted provisionlaw in force, Commission proposal, latest Council text
No Council text amends Article 32f(5a) (new).
Cite this amendment
Amendment 772 (Julie Rechagneux and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 527–776 to the draft report on COM(2025) 837 (CJ72-AM-791071, PE791.071v01-00, 27 July 2026), p. 173
Link, short form and official text
Amendment 772 (Julie Rechagneux and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 527–776 to the draft report on COM(2025) 837 (CJ72-AM-791071, PE791.071v01-00, 27 July 2026), p. 173
ITRE–LIBE Amendment 772 (CJ72-AM-791071), p. 173