Data Act· Article 32f
Text
Article 32f Data Act as printed in the Council text of 22 October 2026
Duties of recognised data altruism organisations
Source Council, 22 October 2026. Article 32f: ST 14756/26, page 89 · pp. 89–90 · exact text page
Article 32f
Its wording is printed below, under Article 32f, heading, (1), (2), (3), (4) and (5).
Article 32f, heading
Duties of recognised data altruism organisations
Article 32f(1)
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
Article 32f(1)(a)
the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
Article 32f(1)(b)
the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
Article 32f(2)
Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
Article 32f(3)
Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
Article 32f(4)
Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
Article 32f(5)
Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
How each paragraph has changed
| What each text would do to the law in force | |||||||
|---|---|---|---|---|---|---|---|
| Paragraph | Commission19 Nov 2025 | Council10 Jun 2026 | Council18 Jun 2026 | Council3 Sep 2026 | Council2 Oct 2026 | Council22 Oct 2026 | Parliamentamendments |
| Compared with | law in force | the proposal | 10 Jun text | 18 Jun text | 3 Sep text | 2 Oct text | |
| 32fText of the articleheading | Adds Added | Adds Unchanged | Adds Unchanged | Adds Unchanged | Adds , changed since 3 Sep Changed | Adds Unchanged | 4 |
| 1Paragraph 1 | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Adds , added since 3 Sep Added | Adds Unchanged | 1 |
| 2Paragraph 2 | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Adds , added since 3 Sep Added | Adds Unchanged | 0 |
| 3Paragraph 3 | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Adds , added since 3 Sep Added | Adds Unchanged | 0 |
| 4Paragraph 4 | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Adds , added since 3 Sep Added | Adds Unchanged | 1 |
| 5Paragraph 5 | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Adds , added since 3 Sep Added | Adds Unchanged | 0 |
| Provisions only Parliament would add or change3 units | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | Not in the law in force or this text In neither text | 6 |
Each text against the law in force: +Adds adds a provision the law in force lacks— neither the law in force nor the text has it changed from the text before
Each text against the text before it: +Added in this text, not in the text before~Changed wording changed=Unchanged same as the text before— in neither text
What each text does
- 19 Nov 2025 Commission proposalCOM(2025) 837 Adds Adds the article. Article 32f in this text
- 5 Jun 2026 JURI draft opinion · Brando Benifei (rapporteur)JURI-PA-789142 1 amendment to this article. Amendments in this document
- 8 Jun 2026 IMCO draft opinion · Alex Agius Saliba (rapporteur)IMCO-PA-789877 2 amendments to this article. Amendments in this document
- 10 Jun 2026 Council textST 10426/26 Unchanged Same as the text before. Article 32f in this text
- 18 Jun 2026 Council textST 10677/26 Unchanged Same as the text before. Article 32f in this text
- 29 Jun 2026 JURI amendments 69–296 to the draft opinionJURI-AM-790236 1 amendment to this article. Amendments in this document
- 16 Jul 2026 IMCO amendments 125–328 to the draft opinionIMCO-AM-790905 1 amendment to this article. Amendments in this document
- 27 Jul 2026 ITRE–LIBE amendments 527–776 to the draft reportCJ72-AM-791071 6 amendments to this article. Amendments in this document
- 3 Sep 2026 Council textST 12535/26 Unchanged Same as the text before. Article 32f in this text
- 2 Oct 2026 Council textST 13886/26 Changed Adds paragraphs 1 to 5 and changes the article. Article 32f in this text
- 22 Oct 2026 Council textST 14756/26 Unchanged Same as the text before. Article 32f in this text
Article 32f: Text of the article
Added by the Commission · changed by the Council on 2 October
Parliament amendments 4
1 proposes alternative wording and 3 would add wording.
| Type | S&D | Greens/EFA | PfE |
|---|---|---|---|
| ~ Alternative | · | 1 | · |
| + Addition | 1 | 1 | 1 |
By political group
- ~ Alternative Greens/EFA 1
- + Addition S&D 1 Greens/EFA 1 PfE 1
Show
216 +Addition David CormandGreens/EFA · JURI “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
(4a)Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, and the number of withdrawals of consent or permission.
- Tabled by
- David Cormand
- Group
- Greens/EFA
- Targets
- Data Act Article 32f
- Document
- JURI amendments 69–296 to the draft opinion
- Source
- Official text, page 122
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32 f
291 +Addition Virginie JoronPfE · IMCO “Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of…” numbered 5a
5a.Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art techniques for that purpose aimed at preserving and reinforcing privacy protection.
- Tabled by
- Virginie Joron
- Group
- PfE
- Targets
- Data Act Article 32f
- Document
- IMCO amendments 125–328 to the draft opinion
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32 f
769 ~Alternative Damian BoeselagerGreens/EFA · ITRE–LIBE “(This amendment applies throughout the text. Adopting it will necessitate corresponding changes throughout.)”
Duties of
recogniseddata altruism organisations (This amendment applies throughout the text. Adopting it will necessitate corresponding changes throughout.)- Tabled by
- Damian Boeselager on behalf of the Verts/ALE Group
- Group
- Greens/EFA
- Targets
- Data Act Article 32f
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – title
770 +Addition Elena Sancho Murillo +6S&D · ITRE–LIBE “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
(4a) In Article 32f, the following paragraph is inserted:
Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.'
Justification
Going back to wording on current Digital Governance Act following the EDPB and the EDPS recommendation to maintain an annual overview of the categories of all natural and legal persons that were allowed to process data could be required and an overview of the sources of revenue of the recognised data altruism organisation to ensure effective oversight.
- Tabled by
- Elena Sancho Murillo, Marina Kaljurand, Brando Benifei, José Cepeda, Lina Gálvez, Francisco Assis, Alex Agius Saliba
- Group
- S&D
- Targets
- Data Act Article 32f
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 4a
Paragraph 1
Added by the Council on 2 October
Parliament amendments 1
1 proposes alternative wording.
77 ~Alternative Alex Agius Saliba (rapporteur)Rapporteur · IMCO “the location of the processing and objectives of general interest, where the processing is carried out by the recognised data altruism organisation.”
(b) the location of the processing and
theobjectives of general interestfor which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.Justification
Recognised data alturism organisations should process their data exclusively in the EU.
- Rapporteur
- Alex Agius Saliba
- Group
- Rapporteur
- Targets
- Data Act Article 32f(1)(b)
- Document
- IMCO draft opinion
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f –paragraph 1 – point b
Paragraph 2
Added by the Council on 2 October
Paragraph 3
Added by the Council on 2 October
Paragraph 4
Added by the Council on 2 October
Parliament amendments 1
1 would add wording to paragraph 4.
770 +Addition Elena Sancho Murillo +6S&D · ITRE–LIBE “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
Text and details of Amendment 770 under the article
Paragraph 5
Added by the Council on 2 October
Provisions only Parliament amendments would add or change
6 amendments on 3 units the Commission proposal leaves unchanged
Paragraph 4a (new)New2 proposals
55 +Addition Brando Benifei (rapporteur)Rapporteur · JURI “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
(4a)Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, and the number of withdrawals of consent or permission.
Justification
This amendment strengthens transparency and accountability obligations for recognised data altruism organisations by requiring regular public reporting on data use, third-country transfers, safeguards and consent withdrawals.
- Rapporteur
- Brando Benifei
- Group
- Rapporteur
- Targets
- Data Act Article 32f – paragraph 4 a (new)
- Document
- JURI draft opinion
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 4 a (new)
78 +Addition Alex Agius Saliba (rapporteur)Rapporteur · IMCO “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
(4a)Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
Justification
Text originating from art. 20(2)(e) DGA and addressing a concern raised by EDPB-EDPS Opinion, para. 141.
- Rapporteur
- Alex Agius Saliba
- Group
- Rapporteur
- Targets
- Data Act Article 32f – paragraph 4 a (new)
- Document
- IMCO draft opinion
- Source
- Official text, page 63
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 4 a (new)
Paragraph 5a (new)New3 proposals
771 +Addition Michael McNamara +4Renew · ITRE–LIBE “Recognised data altruism organisations shall keep full and accurate records concerning: (a) natural or legal persons that were given the possibility…” numbered 5a
(5a)Recognised data altruism organisations shall keep full and accurate records concerning:
(a)natural or legal persons that were given the possibility to process data held by that recognised data altruism organisation, and their contact details;
(b)the date or duration of the processing of personal data or use of non-personal data;
(c)the purpose of the processing as declared by the natural or legal person that was given the possibility of processing;
(d)the fees paid by natural or legal persons processing the data, if any;
(e)a summary description of the objectives of general interest pursued by such data processing and the description of the technical means used for it, including a description of the techniques used to preserve privacy and data protection.
- Tabled by
- Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Christophe Grudler
- Group
- Renew
- Targets
- Data Act Article 32f – paragraph 5a (new)
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 172
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5a (new)
772 +Addition Julie Rechagneux +7ECR, PfE · ITRE–LIBE “Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of…” numbered 5a
(5a)Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.
Justification
Recognised data altruism organisations collect and make available data voluntarily provided for objectives of general interest, and thereby handle data whose exposure entails significant risks for the natural and legal persons concerned. In addition to the duty to inform data holders after the event, laid down in paragraph 4, such organisations should be required to take preventive measures. This provision requires them to implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them, and to apply state-of-the-art privacy-preserving and privacy-enhancing techniques where the data are processed or shared in pseudonymised or anonymised form. This reinforces the protection of data subjects and data holders and strengthens trust in data altruism, in line with the principles of integrity and confidentiality laid down in Regulation (EU) 2016/679.
- Tabled by
- Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay
- Group
- ECR, PfE
- Targets
- Data Act Article 32f – paragraph 5a (new)
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 173
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5a (new)
773 +Addition Mary KhanESN · ITRE–LIBE “Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user.…” numbered 5a
(5a)Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user. Refusal to give consent or permission shall not result in any disadvantage. It must be as easy to withdraw consent or permission as it is to give it.
- Tabled by
- Mary Khan
- Group
- ESN
- Targets
- Data Act Article 32f – paragraph 5a (new)
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5 a (new)
Paragraph 5b (new)New
774 +Addition Michael McNamara +4Renew · ITRE–LIBE “Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism…” numbered 5b
(5b)Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism organisations an annual activity report which shall contain at least the following:
(a)categories of natural and legal persons that were allowed to process data it holds;
(b)information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
- Tabled by
- Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Christophe Grudler
- Group
- Renew
- Targets
- Data Act Article 32f – paragraph 5b (new)
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 174
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5b (new)