EUTechRegResearch
MenuClose menu
Digital Omnibus legislative tracker
Texts to 22 Oct 2026

Article 24 – Responsibility of the controller

Only Parliament amendments would change this article. Parliament committees have tabled 1 amendment to this article.

Latest text22 October 2026ST 14756/26

Contains no amendment to this article.

What each text does

  1. 19 Nov 2025 Commission proposalCOM(2025) 837 No amendment to this article.
  2. 21 May 2026 Council textST 9547/26 No amendment to this article.ST 9547/26 reproduces only some of the proposal’s changes, so this comparison applies only those it shows or visibly drops. It says nothing about the others.
  3. 10 Jun 2026 Council textST 10426/26 No amendment to this article.
  4. 18 Jun 2026 Council textST 10677/26 No amendment to this article.
  5. 27 Jul 2026 ITRE–LIBE amendments 1053–1260 to the draft reportCJ72-AM-791073 1 amendment to this article. Amendments in this document
  6. 3 Sep 2026 Council textST 12535/26 No amendment to this article.
  7. 2 Oct 2026 Council textST 13886/26 No amendment to this article.Page 126 prints “(9a)” without an instruction or target, so no change can be assigned to that marker.
  8. 22 Oct 2026 Council textST 14756/26 No amendment to this article.

Parliament amendments

1 amendment to this article

1 would add wording.

By political group; co-sponsored amendments count for each group
TypeGreens/EFA
+ Addition1

By political group

  • + Addition Greens/EFA 1
  1. 1171 Addition Markéta GregorováGreens/EFA · ITRE–LIBE “The manufacturer shall design and develop its products, services and applications, taking into account the right to the protection of personal data…”

    7b. In Article 24, paragraph 4 is added:

    The manufacturer shall design and develop its products, services and applications, taking into account the right to the protection of personal data and the state of the art, in such a manner that controllers and processors using those products, services and applications for the processing of personal data are able to comply with their obligations under this Regulation based on the default settings and without having to make disproportionate modifications to those products, services and applications. The manufacturer shall support controllers and processors in fulfilling their obligations under Articles 30, 33 and 34 by providing, upon request, all information necessary for that purpose. This paragraph does not apply to free and open-source software that is developed or supplied outside the course of a commercial activity.‘

    Justification

    Exception for non-commercial free and open-source software from Article 2(2) of the Product Liability Directive (EU) 2024/2853.

    Tabled by
    Markéta Gregorová on behalf of the Verts/ALE Group
    Group
    Greens/EFA
    Targets
    GDPR Article 24 – paragraph 4
    Document
    ITRE–LIBE amendments 1053–1260 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 7 b (new) / Regulation (EU) 2016/679 / Article 24 – paragraph 4