Digital Omnibus tracker

Data Act · Regulation (EU) 2023/2854

Article 32w

Compare the available Commission, Council and Parliament texts and amendments affecting this article.

Article total: 3 parts · 3 Council drafts · 7 Parliament amendments

Removed wording is struck through; added or replacement wording is highlighted.

Institutional text

European Commission proposal

All Commission’s changes to Data Act

The wording proposed by the Commission at the start of this legislative file.

Full article with Commission changes

Article with proposed changes

Official consolidated text dated 13 December 2023, with the Commission proposal change affecting this article applied.

Article 32w

Conditions for re-use

  1. 1.

    Public sector bodies which are competent under national law to grant or refuse access for the re-use of data or documents belonging to certain categories of protected data shall make publicly available the conditions for allowing such re-use and the procedure to request the re-use via the single information point referred to in Article 32aa. Where they grant or refuse access for re-use, they may be assisted by the competent bodies referred to in Article 32z (1). Member States shall ensure that public sector bodies are equipped with the necessary resources to comply with this Article and Article 32x.

  2. 2.

    Re-use of data or documents shall not affect the protected nature of those data or documents and shall only be allowed:

    1. (a)

      in compliance with intellectual property rights.

    2. (b)

      if data that is considered confidential in accordance with Union or national law on commercial or statistical confidentiality, is not disclosed, as a result of allowing re-use, unless such re-use is allowed based on the data subject’s consent or the data holder’s permission in accordance with paragraph 5.

    3. (c)

      in compliance with Regulation (EU) 2016/679.

  3. 3.

    To ensure the preservation of the protected nature as referred to in paragraph 2, public sector bodies may establish the following requirements:

    1. (a)

      to grant access for the re-use of data or documents only where the public sector body or the competent body, following the request for re-use, has ensured that those data or documents have been:

      1. (i)

        anonymised, in the case of personal data;

      2. (ii)

        subject to other forms of preparation of personal data;

      3. (iii)

        modified, aggregated or treated by any other method of disclosure control, in the case of commercially confidential information, including trade secrets or content protected by intellectual property rights;

    2. (b)

      to access and re-use the data or documents remotely within a secure processing environment that is provided or controlled by the public sector body;

    3. (c)

      to access and re-use the data or documents within the physical premises in which the secure processing environment is located in accordance with high security standards, provided that remote access cannot be allowed without jeopardising the rights and interests of third parties. In the case of re-use allowed in accordance with the first subparagraph, point (a)(i), the re-use of data or documents shall be subject to the rules on open government data set out in Section 2. This is without prejudice to Article 32y, which prevails in case of conflict. In the case of re-use allowed in accordance with the first subparagraph, points (b) and (c), the public sector bodies shall impose conditions that preserve the integrity of the functioning of the technical systems of the secure processing environment used.

  4. 4.

    The public sector body shall reserve the right to verify the process, the means and any results of processing of data or documents undertaken by the re-user to preserve the integrity of the protection of the data or documents. It shall also reserve the right to prohibit the use of results that contain information jeopardising the rights and interests of third parties. The decision to prohibit the use of the results shall be comprehensible and transparent to the re-user. Unless national law provides for specific safeguards on applicable confidentiality obligations relating to the re-use of certain categories of protected data, the public sector body shall make the re-use of data or documents provided in accordance with paragraph 3 conditional on the adherence by the re-user to a confidentiality obligation that prohibits the disclosure of any information that jeopardises the rights and interests of third parties and that the re-user may have acquired despite the safeguards put in place. In the event of the unauthorised re-use of non-personal data, the re-user shall be obliged, without delay, where appropriate with the assistance of the public sector body, to inform the natural or legal persons whose rights and interests may be affected.

  5. 5.

    Where the re-use of data or documents cannot be allowed in accordance with paragraphs 3 and 4, re-use shall only be possible:

    1. (a)

      where there is no legal basis other than consent for transmitting the data under Regulation (EU) 2016/679, with the consent of the data subjects;

    2. (b)

      with the permission from the data holders whose rights and interests may be affected by such re-use. The public sector body shall make best efforts, in accordance with Union and national law, to provide assistance to potential re-users in seeking consent of the data subjects or permission from the data holders whose rights and interests may be affected by such re-use, where this is feasible without a disproportionate burden on the public sector body. Where it provides such assistance, the public sector body may be assisted by the competent bodies referred to in Article 32z.

Commission source wording and instructions

Article 32w

Commission proposal

Article 32w Conditions for re-use (1) Public sector bodies which are competent under national law to grant or refuse access for the re-use of data or documents belonging to certain categories of protected data shall make publicly available the conditions for allowing such re-use and the procedure to request the re-use via the single information point referred to in Article 32aa. Where they grant or refuse access for re-use, they may be assisted by the competent bodies referred to in Article 32z (1). Member States shall ensure that public sector bodies are equipped with the necessary resources to comply with this Article and Article 32x. (2) Re-use of data or documents shall not affect the protected nature of those data or documents and shall only be allowed: (a) in compliance with intellectual property rights. (b) if data that is considered confidential in accordance with Union or national law on commercial or statistical confidentiality, is not disclosed, as a result of allowing re-use, unless such re-use is allowed based on the data subject’s consent or the data holder’s permission in accordance with paragraph 5. (c) in compliance with Regulation (EU) 2016/679. (3) To ensure the preservation of the protected nature as referred to in paragraph 2, public sector bodies may establish the following requirements: (a) to grant access for the re-use of data or documents only where the public sector body or the competent body, following the request for re-use, has ensured that those data or documents have been: (i) anonymised, in the case of personal data; (ii) subject to other forms of preparation of personal data; (iii) modified, aggregated or treated by any other method of disclosure control, in the case of commercially confidential information, including trade secrets or content protected by intellectual property rights; (b) to access and re-use the data or documents remotely within a secure processing environment that is provided or controlled by the public sector body; (c) to access and re-use the data or documents within the physical premises in which the secure processing environment is located in accordance with high security standards, provided that remote access cannot be allowed without jeopardising the rights and interests of third parties. In the case of re-use allowed in accordance with the first subparagraph, point (a)(i), the re-use of data or documents shall be subject to the rules on open government data set out in Section 2. This is without prejudice to Article 32y, which prevails in case of conflict. In the case of re-use allowed in accordance with the first subparagraph, points (b) and (c), the public sector bodies shall impose conditions that preserve the integrity of the functioning of the technical systems of the secure processing environment used. (4) The public sector body shall reserve the right to verify the process, the means and any results of processing of data or documents undertaken by the re-user to preserve the integrity of the protection of the data or documents. It shall also reserve the right to prohibit the use of results that contain information jeopardising the rights and interests of third parties. The decision to prohibit the use of the results shall be comprehensible and transparent to the re-user. Unless national law provides for specific safeguards on applicable confidentiality obligations relating to the re-use of certain categories of protected data, the public sector body shall make the re-use of data or documents provided in accordance with paragraph 3 conditional on the adherence by the re-user to a confidentiality obligation that prohibits the disclosure of any information that jeopardises the rights and interests of third parties and that the re-user may have acquired despite the safeguards put in place. In the event of the unauthorised re-use of non-personal data, the re-user shall be obliged, without delay, where appropriate with the assistance of the public sector body, to inform the natural or legal persons whose rights and interests may be affected. (5) Where the re-use of data or documents cannot be allowed in accordance with paragraphs 3 and 4, re-use shall only be possible: (a) where there is no legal basis other than consent for transmitting the data under Regulation (EU) 2016/679, with the consent of the data subjects; (b) with the permission from the data holders whose rights and interests may be affected by such re-use. The public sector body shall make best efforts, in accordance with Union and national law, to provide assistance to potential re-users in seeking consent of the data subjects or permission from the data holders whose rights and interests may be affected by such re-use, where this is feasible without a disproportionate burden on the public sector body. Where it provides such assistance, the public sector body may be assisted by the competent bodies referred to in Article 32z.

Institutional text

Council Presidency texts

Successive Presidency compromise texts. Their inclusion does not imply agreement or adoption.

Article 32w

June Presidency compromise · 10 June

Council wording reconstructed for this provision from the official operation

Article 32w Conditions for re-use of protected data

Competing proposals

European Parliament amendments

These are alternative tabled amendments. An amendment affecting several tracked parts appears once here, with each target identified.

More filters

Political group at the amendment date where available; otherwise the current Parliament affiliation.

Remove proposed wording Amendment 32 ITRE–LIBE draft report · Aura Salla and Marina Kaljurand (rapporteurs)
Preview
against:
Remove proposed wording Amendment 33 ITRE–LIBE draft report · Aura Salla and Marina Kaljurand (rapporteurs)
(a) where there is no legal basis other than consent for transmitting the data under Regulation (EU) 2016/679, with the consent of the data subjects;
Preview
against:
Remove proposed wording Amendment 316 · Sophia Kircher IMCO
Preview
against:
Source identification

Header printed in the source: Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32w – paragraph 3 ii

Deletion marker printed in the source: deleted

Remove proposed wording Amendment 317 · Sophia Kircher IMCO
(a) where there is no legal basis other than consent for transmitting the data under Regulation (EU) 2016/679, with the consent of the data subjects;
Preview
against:
Source identification

Header printed in the source: Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32w – paragraph 5 a

Deletion marker printed in the source: deleted

Remove proposed wording Amendment 849 · João Oliveira ITRE · LIBE
Preview
against:
Source identification

Header printed in the source: Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32w – paragraph 3 – point a – point ii

Deletion marker printed in the source: deleted

Remove proposed wording Amendment 850 · Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Christophe Grudler ITRE · LIBE
Preview
against:
Source identification

Header printed in the source: Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32w – paragraph 3 – point a – point ii

Deletion marker printed in the source: deleted

Remove proposed wording Amendment 851 · João Oliveira ITRE · LIBE
(a) where there is no legal basis other than consent for transmitting the data under Regulation (EU) 2016/679, with the consent of the data subjects;
Preview
against:
Source identification

Header printed in the source: Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32w – paragraph 5 – point a

Deletion marker printed in the source: deleted