Regulation (EU) 2023/2854 — Article 32f

Article total: 7 parts · 3 Council drafts · 11 Parliament amendments

Tracked part

Removed wording is struck through; added or replacement wording is highlighted.

Institutional text

European Commission proposal

All Commission’s changes to Data Act

The wording proposed by the Commission at the start of this legislative file.

Full article with Commission changes

Article with proposed changes

Official consolidated text dated 13 December 2023, with the Commission proposal change affecting this article applied.

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Commission source wording and instructions

Article 32f

Commission proposal

Article 32f Duties of recognised data altruism organisations (1) Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following: (a) the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user; (b) the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation. (2) Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data. (3) Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal. (4) Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared. (5) Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Institutional text

Council Presidency texts

Successive Presidency compromise texts. Their inclusion does not imply agreement or adoption.

Council document

View full Council comparison →

Article 32f

June Presidency compromise · 10 June

View full Council comparison →

Article 32f

June Presidency compromise · 18 June

View full Council comparison →

Article 32f

September Presidency compromise

Council wording reconstructed for this provision from the official operation

Article 32f 3 Council drafts

Article 32f

10 June 2026 · June Presidency compromise · 10 June

Article 32f

18 June 2026 · June Presidency compromise · 18 June

Article 32f

3 September 2026 · September Presidency compromise

Council wording reconstructed for this provision from the official operation

Competing proposals

European Parliament amendments

These are alternative tabled amendments. An amendment affecting several tracked parts appears once here, with each target identified.

Search amendments

Political group at the amendment date where available; otherwise the current Parliament affiliation.

Additional proposed wording Amendment 55 JURI draft opinion · Brando Benifei (rapporteur)

(4a)

Justification

This amendment strengthens transparency and accountability obligations for recognised data altruism organisations by requiring regular public reporting on data use, third-country transfers, safeguards and consent withdrawals.

Preview
against:

Incomplete comparison. Only the changes that can be reconstructed are shown.

Unresolved changes and source qualifications

Unresolved change: The official source replaces Article 2 point (49) with the printed dynamic-data definition; it is not a pure addition. The accepted relationship does not establish the surrounding ordered replacement/removal chain for the following Commission points. Without verified removals and renumbering, applying point (49) alone leaves the dynamic-data, research-data and re-use definitions at points (50), (51) and (52) without a source-backed chain and risks duplicate definitions; preserve this amendment as incomplete. Unresolved change: The official header and unit label identify Regulation (EU) 2023/2854 Article 2 point 50, while the copied base text uniquely reproduces a different Commission definition within the same replace-proposed-text operation. Preserve the printed target and copied source columns; the full-article scenario remains incomplete and neither target is silently substituted. Unresolved change: The official amendment header and unit label identify the printed legal target, while its copied base text uniquely reproduces a different Commission definition in the same operation. The printed target is preserved and the full-article scenario remains incomplete; neither target is silently substituted. Unresolved change: The official header and unit label identify Regulation (EU) 2023/2854 Article 2 point 51, while the copied base text uniquely reproduces a different Commission definition within the same replace-proposed-text operation. Preserve the printed target and copied source columns; the full-article scenario remains incomplete and neither target is silently substituted. Unresolved change: The official source header identifies Article 32r paragraph 3, while both source columns reproduce paragraph (4). The header remains authoritative and no corrected legal target is substituted.

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, and the number of withdrawals of consent or permission.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, and the number of withdrawals of consent or permission.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Alternative wording Amendment 77 IMCO draft opinion · Alex Agius Saliba (rapporteur)

(b) the location of the processing and ~~the~~ objectives of general interest ~~for which it permits any processing carried out in a third country~~, where the processing is carried out by the recognised data altruism organisation.

Justification

Recognised data alturism organisations should process their data exclusively in the EU.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and objectives of general interest, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Additional proposed wording Amendment 78 IMCO draft opinion · Alex Agius Saliba (rapporteur)

(4a)

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.

Justification

Text originating from art. 20(2)(e) DGA and addressing a concern raised by EDPB-EDPS Opinion, para. 141.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and objectives of general interest, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Additional proposed wording Amendment 216 JURI

(4a)

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, and the number of withdrawals of consent or permission.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Additional proposed wording Amendment 291 IMCO

5a.

Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art techniques for that purpose aimed at preserving and reinforcing privacy protection.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
5a.

Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art techniques for that purpose aimed at preserving and reinforcing privacy protection.

Alternative wording Amendment 769 ITRE · LIBE

Duties of ~~recognised~~ data altruism organisations (This amendment applies throughout the text. Adopting it will necessitate corresponding changes throughout.)

Preview
against:

Additional proposed wording Amendment 770 ITRE · LIBE

(4a) In Article 32f, the following paragraph is inserted:

Justification

Going back to wording on current Digital Governance Act following the EDPB and the EDPS recommendation to maintain an annual overview of the categories of all natural and legal persons that were allowed to process data could be required and an overview of the sources of revenue of the recognised data altruism organisation to ensure effective oversight.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
4a.

Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.'
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.

Additional proposed wording Amendment 771 ITRE · LIBE

(5a)

Recognised data altruism organisations shall keep full and accurate records concerning:

(a)

natural or legal persons that were given the possibility to process data held by that recognised data altruism organisation, and their contact details;

(b)

the date or duration of the processing of personal data or use of non-personal data;

(c)

the purpose of the processing as declared by the natural or legal person that was given the possibility of processing;

(d)

the fees paid by natural or legal persons processing the data, if any;

(e)

a summary description of the objectives of general interest pursued by such data processing and the description of the technical means used for it, including a description of the techniques used to preserve privacy and data protection.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
5a.
Recognised data altruism organisations shall keep full and accurate records concerning:
1. (a)
  
  natural or legal persons that were given the possibility to process data held by that recognised data altruism organisation, and their contact details;
2. (b)
  
  the date or duration of the processing of personal data or use of non-personal data;
3. (c)
  
  the purpose of the processing as declared by the natural or legal person that was given the possibility of processing;
4. (d)
  
  the fees paid by natural or legal persons processing the data, if any;
5. (e)
  
  a summary description of the objectives of general interest pursued by such data processing and the description of the technical means used for it, including a description of the techniques used to preserve privacy and data protection.

Additional proposed wording Amendment 772 ITRE · LIBE

(5a)

Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.

Justification

Recognised data altruism organisations collect and make available data voluntarily provided for objectives of general interest, and thereby handle data whose exposure entails significant risks for the natural and legal persons concerned. In addition to the duty to inform data holders after the event, laid down in paragraph 4, such organisations should be required to take preventive measures. This provision requires them to implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them, and to apply state-of-the-art privacy-preserving and privacy-enhancing techniques where the data are processed or shared in pseudonymised or anonymised form. This reinforces the protection of data subjects and data holders and strengthens trust in data altruism, in line with the principles of integrity and confidentiality laid down in Regulation (EU) 2016/679.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
5a.

Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.

Additional proposed wording Amendment 773 ITRE · LIBE

(5a)

Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user. Refusal to give consent or permission shall not result in any disadvantage. It must be as easy to withdraw consent or permission as it is to give it.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
5a.

Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user. Refusal to give consent or permission shall not result in any disadvantage. It must be as easy to withdraw consent or permission as it is to give it.

Additional proposed wording Amendment 774 ITRE · LIBE

(5b)

Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism organisations an annual activity report which shall contain at least the following:

(a)

categories of natural and legal persons that were allowed to process data it holds;

(b)

information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.

Preview
against:

Article 32f

Duties of recognised data altruism organisations

1.
Recognised data altruism organisations shall inform data subjects or data holders prior to any processing of their data in a clear and easily comprehensible manner of the following:
1. (a)
  
  the objectives of general interest and, if applicable, the specified, explicit and legitimate purpose for which personal data is to be processed, and for which it permits the processing of their data by a data user;
2. (b)
  
  the location of the processing and the objectives of general interest for which it permits any processing carried out in a third country, where the processing is carried out by the recognised data altruism organisation.
2.

Recognised data altruism organisations shall not use the data for other objectives than the objectives of general interest for which the data subject or data holder allows the processing. The recognised data altruism organisation shall not use misleading marketing practices to solicit the provision of data.
3.

Recognised data altruism organisations shall provide electronic means for obtaining consent from data subjects or permissions to process data made available by data holders as well as for their withdrawal.
4.

Recognised data altruism organisations shall, without delay, inform data holders in the event of any unauthorised transfer, access or use of the non-personal data that it has shared.
5.

Where recognised data altruism organisations facilitate data processing by third parties, including by providing tools for obtaining consent from data subjects or permissions to process data made available by data holders, they shall, where relevant, specify the third-country in which the data use is intended to take place.
5b.
Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism organisations an annual activity report which shall contain at least the following:
1. (a)
  
  categories of natural and legal persons that were allowed to process data it holds;
2. (b)
  
  information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.

Article in June Presidency compromise · 10 June Council text

Article in June Presidency compromise · 18 June Council text

Article in September Presidency compromise Council text

Changes in context

European Commission proposal

Council Presidency text · ST 10426/26

Changes in context

Council Presidency text · ST 10426/26

Council Presidency text · ST 10677/26

Changes in context

Council Presidency text · ST 10677/26

Council Presidency text · ST 12535/26

Changes in context

Wording reproduced in the amendment

Amendment 769 · ITRE–LIBE amendments 527–776 to the draft report

Changes in context

Wording reproduced in the amendment

Amendment 769 · ITRE–LIBE amendments 527–776 to the draft report

Changes in context

Wording reproduced in the amendment

Amendment 77 · IMCO draft opinion · Alex Agius Saliba (rapporteur)