Article 11

1.A data holder may apply appropriate technical protection measures, including smart contracts and encryption, to prevent unauthorised access to data, including metadata, and to ensure compliance with Articles 4, 5, 6, 8 and 9, as well as with the agreed contractual terms for making data available. Such technical protection measures shall not discriminate between data recipients or hinder a user’s right to obtain a copy of, retrieve, use or access data, to provide data to third parties pursuant to Article 5 or any right of a third party under Union law or national legislation adopted in accordance with Union law, without prejudice to the right of a data holder to refuse access to specific data in accordance with Article 4(8) or 5(11). Users, third parties and data recipients shall not alter or remove such technical protection measures unless agreed by the data holder.'