Recital 24b

Member States should establish a single information point as an interface for re-users seeking to re-use specific categories of protected data held by public sector bodies. The single information point should have a cross-sector remit, complement sectoral arrangements where necessary, and may rely on automated means to transmit enquiries or requests for re-use, subject to appropriate human oversight. Existing arrangements, such as open data portals, may be used for that purpose. It should maintain an asset list providing an overview of available data resources, including, where relevant, data resources accessible through sectoral, regional or local information points, together with relevant descriptive information. Member States should also designate, establish or facilitate the establishment of one or more competent bodies to support public sector bodies in enabling the re-use of protected data. Such bodies may, where provided for under Union or national sectoral law, grant access to data. They should assist public sector bodies by providing expertise on state-of-the-art techniques for structuring, storing and making data accessible, including through application programming interfaces, and for ensuring interoperability, transferability and searchability. They should also support the use of best practices, applicable regulatory and technical standards, and secure processing environments that enable data analysis while preserving privacy, confidentiality and other protected interests. Competent bodies should act in accordance with the instructions of the public sector body concerned. They may also support data subjects and data holders in managing consent or permissions for re-use, including for scientific research conducted in accordance with recognised ethical standards. Without prejudice to the powers of data protection authorities, any processing of personal data should remain under the responsibility of the public sector body responsible for the relevant register, which remains the controller within the meaning of Regulation (EU) 2016/679. Member States should be able to designate one or more competent bodies, including internal services of public sector bodies. A competent body may assist other public sector bodies in enabling re-use of data or may itself enable such re-use. Assistance may include providing guidance on compliance with the rules relating to re-use of protected data, including on secure processing environments and technical measures to ensure privacy and confidentiality. Where competent bodies grant or refuse access for the re-use Articles 32k, 32w, 32x, 32y and 32ab should apply to those competent bodies.