Article 32pa
Only Parliament amendments would change this article. Parliament committees have tabled 1 amendment to this article.
Latest text22 October 2026ST 14756/26
Contains no amendment to this article.
What each text does
- 19 Nov 2025 Commission proposalCOM(2025) 837 No amendment to this article.
- 10 Jun 2026 Council textST 10426/26 No amendment to this article.
- 18 Jun 2026 Council textST 10677/26 No amendment to this article.
- 27 Jul 2026 ITRE–LIBE amendments 777–1052 to the draft reportCJ72-AM-791072 1 amendment to this article. Amendments in this document
- 3 Sep 2026 Council textST 12535/26 No amendment to this article.
- 2 Oct 2026 Council textST 13886/26 No amendment to this article.
- 22 Oct 2026 Council textST 14756/26 No amendment to this article.
Parliament amendments
1 amendment to this article
1 would add wording.
| Type | ECR | PfE |
|---|---|---|
| + Addition | 1 | 1 |
By political group
- + Addition ECR 1 PfE 1
820 +Addition Julie Rechagneux +7ECR, PfE · ITRE–LIBE “'Article 32pa Pseudonymisation and request for consent 1. Where the data or documents made available for re-use under this Chapter contain personal…”
(8a)After Article 32p, the following Article 32 is inserted:
'Article 32pa
Pseudonymisation and request for consent
1.Where the data or documents made available for re-use under this Chapter contain personal data, the public sector body shall, prior to allowing re-use, apply state-of-the-art privacy-preserving and privacy-enhancing techniques within the meaning of Article 4 of Regulation (EU) 2016/679, including pseudonymisation, so as to reduce the likelihood of attribution of the data to a specific natural person while preserving their utility for the purpose of re-use.
2.The measures referred to in paragraph 1 shall be designed to protect personal data and data relating to identifiable natural persons against re-identification, against personal data breaches, and against unlawful use and trade, taking into account the means reasonably likely to be used. The residual risk of re-identification, including by algorithmic means, shall be assessed and documented.
3.Where the re-use of personal data requires the consent of the data subject, the public sector body or the competent body shall facilitate the giving, refusal and withdrawal of that consent, including by automated and machine-readable means and, where appropriate, through a consent and agency-enhancing service provider within the meaning of Article 2, point (38f). Consent obtained for re-use shall be specific to the purposes of re-use and shall not be presumed from consent given for the initial purpose for which the data were collected.
4.This Article is without prejudice to Regulation (EU) 2016/679, which shall prevail in the event of conflict, and to the conditions for the re-use of certain categories of protected data laid down in Section 3.
- Tabled by
- Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay
- Group
- ECR, PfE
- Targets
- Data Act Article 32pa (new)
- Document
- ITRE–LIBE amendments 777–1052 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32pa (new)