[{"command":"settings","settings":{"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxPageState":{"libraries":"eJxLzi9K1U8pKi1IzNFLyUzMyU_XS8xKrNApSCxKTC9KLMgohskiRPRK8wpKk3IyizNSUwAiWxkF","theme":"upd","theme_token":null},"ajaxTrustedUrl":[],"user":{"uid":0,"permissionsHash":"22dcdfba032631beed6427d0f24bf0844dfb9bda62deaafe5cec74da1a30ffe0"}},"merge":true},{"command":"add_css","data":[{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/core.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/controlgroup.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/checkboxradio.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/resizable.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/button.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/dialog.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/misc\/components\/progress.module.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/misc\/components\/ajax-progress.module.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/core\/assets\/vendor\/jquery.ui\/themes\/base\/theme.css?tj04ap"},{"rel":"stylesheet","media":"all","href":"\/modules\/contrib\/paragraphs\/css\/paragraphs.unpublished.css?tj04ap"}]},{"command":"add_js","selector":"body","data":[{"src":"\/core\/assets\/vendor\/jquery\/jquery.min.js?v=3.7.1"},{"src":"\/core\/assets\/vendor\/once\/once.min.js?v=1.0.1"},{"src":"\/core\/misc\/drupalSettingsLoader.js?v=10.6.3"},{"src":"\/core\/misc\/drupal.js?v=10.6.3"},{"src":"\/core\/misc\/drupal.init.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/version-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/data-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/disable-selection-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/jquery-patch-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/scroll-parent-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/unique-id-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/focusable-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/keycode-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/plugin-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widget-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/labels-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/controlgroup-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/form-reset-mixin-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/mouse-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/checkboxradio-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/draggable-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/resizable-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/button-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/jquery.ui\/ui\/widgets\/dialog-min.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/tabbable\/index.umd.min.js?v=6.3.0"},{"src":"\/core\/assets\/vendor\/tua-body-scroll-lock\/tua-bsl.umd.min.js?v=10.6.3"},{"src":"\/core\/misc\/progress.js?v=10.6.3"},{"src":"\/core\/assets\/vendor\/loadjs\/loadjs.min.js?v=4.3.0"},{"src":"\/core\/misc\/debounce.js?v=10.6.3"},{"src":"\/core\/misc\/announce.js?v=10.6.3"},{"src":"\/core\/misc\/message.js?v=10.6.3"},{"src":"\/core\/misc\/ajax.js?v=10.6.3"},{"src":"\/core\/misc\/displace.js?v=10.6.3"},{"src":"\/core\/misc\/jquery.tabbable.shim.js?v=10.6.3"},{"src":"\/core\/misc\/position.js?v=10.6.3"},{"src":"\/core\/misc\/dialog\/dialog-deprecation.js?v=10.6.3"},{"src":"\/core\/misc\/dialog\/dialog.js?v=10.6.3"},{"src":"\/core\/misc\/dialog\/dialog.position.js?v=10.6.3"},{"src":"\/core\/misc\/dialog\/dialog.jquery-ui.js?v=10.6.3"},{"src":"\/core\/misc\/dialog\/dialog.ajax.js?v=10.6.3"}]},{"command":"openDialog","selector":"#drupal-modal","settings":null,"data":"\n          \u003Ca href=\u0022#\u0022\u003E\u003C\/a\u003E\n      \n  \u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EBackground\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe EU recognised that a lot of valuable data was going unused because there was no trusted, standardised way to share it, in part because the GDPR (General Data Protection Regulation) limited the ability for data to be re-used for secondary purposes such as research. The Data Governance Act was proposed in November 2020 as the first concrete piece of the EU\u0027s wider \u201cEuropean strategy for data,\u201d and became applicable across the EU from 24 September 2023. The Data Governance Act (DGA) plans to create nine shared data spaces for different areas. The first is the European Health Data Space (EHDS), which focuses on health information. Other data spaces will cover areas such as transport, manufacturing, banking and finance, energy, and farming. Some will focus on wider topics, such as helping the environment through the European Green Deal, improving public services, and developing people\u0027s skills.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EOverview\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe DGA is a cross-sectoral law which focuses on building trust in voluntary data sharing:\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003ERe-use of public sector data: \u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003EPublic sector bodies hold large amounts of\u0026nbsp;protected data\u0026nbsp;(e.g. personal data and commercially confidential data) that cannot be reused as open data but that could be reused under specific EU or national legislation. Valuable information can be learned from this data without compromising private or protected details. The DGA sets out rules and safety measures to help organisations reuse data safely when other laws allow.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EData intermediation services: \u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003EThe DGA sets rules for organisations that help people and businesses share data, such as online data marketplaces. These organisations are called data intermediaries. The rules are designed to make sure they are trusted and reliable when helping to share data within the Common European Data Spaces. To help people feel confident about sharing data, data intermediaries must act fairly, openly, and transparently. The aim is to give individuals and businesses more control over how their data is used and shared.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EData altruism: \u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003EData altruism means that people and organisations choose to share data they have created to help others. They do this voluntarily and do not receive any payment. The shared data can be used for projects that benefit society, such as improving healthcare, protecting the environment, and making transport systems better. Data like this can help researchers make new discoveries and create better products and services for everyone.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EEuropean Data Innovation Board: \u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003EThe DGA establishes the\u0026nbsp;\u003C\/span\u003E\u003C\/span\u003E\u003Ca href=\u0022https:\/\/ec.europa.eu\/transparency\/expert-groups-register\/screen\/expert-groups\/consult?lang=en\u0026amp;groupID=3903\u0022\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EEuropean Data Innovation Board (EDIB)\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/a\u003E\u003Cspan\u003E\u003Cspan\u003E. This helps countries and organisations share best practices and focuses on topics such as sharing data safely, supporting data altruism, and making better use of public data that cannot be freely shared. The group also helps make sure that different systems can work together and share data more easily.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EKey provisions\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003ENotification of data intermediaries:\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003E Companies that provide data intermediation must notify a national regulator before they start operating rather than seeking upfront approval. These companies must stay neutral, which means they cannot use the data for their own benefit. They must also keep their data-sharing service separate from any other business activities they run.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003ERegistration of data altruism organisations:\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003E Data altruism organisations must operate on a non-profit basis, be legally independent from any business that operates to make a profit, and follow rules designed to keep the arrangement voluntary and transparent for the people donating their data.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003ESafeguards on international transfers:\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003E Where a public body, data intermediary, or data altruism organisation is asked by a non-EU government or court to hand over protected data, the DGA requires safeguards broadly similar to those the GDPR uses for personal data transfers, even though much of the DGA\u0027s protected data is non-personal.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EReuse of non-personal data: \u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003Cspan\u003E\u003Cspan\u003EThe DGA does not create a right to reuse personal data - where the underlying data is personal, the GDPR still applies in full, and the DGA operates alongside it rather than instead of it.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003E\u003Cspan\u003EUK relevance\u003C\/span\u003E\u003C\/span\u003E\u003C\/strong\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe DGA rules can apply to some organisations based in the UK. If they provide data-sharing services to people or organisations in the EU, they must follow these rules and may need to appoint a representative in the EU. Provisions similar to those within the DGA appear in UK policy. The Data (Use and Access) Act 2025 introduces \u201csmart data\u201d schemes (which similarly to data intermediation, give people more control over data held about them and how it is shared with third parties) and strengthens rules on information standards. In health specifically, the NHS uses secure \u201ctrusted research environments\u201d for data access - a model that is similar to the DGA and the EHDS, in that data can be made available for uses like research without having to be handed over or exposed to misuse. UK organisations that work with partners in the EU on data-sharing projects, especially in research and healthcare, may come across the DGA\u0027s rules on data intermediaries and altruism, even though the UK is not part of the DGA system.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\n\n      \u003Ch3 class=\u0022modal--field-link--title\u0022\u003EFurther reading\u003C\/h3\u003E\n\u003Cul class=\u0022modal--field-link--list\u0022\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022R0868\u0022\u003EData Governance Act Regulation (EU) 2022\/868 \u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/data-governance-act-explained\u0022\u003EData Governance Act explained\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/data-intermediary-services\u0022\u003ERegister of data intermediation services\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/commission.europa.eu\/document\/download\/e052551b-50d9-4c7d-9166-95b7718a80b6_en?filename=communication-european-strategy-data-19feb2020_en.pdf\u0022\u003EA European strategy for data\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\n    ","dialogOptions":{"width":"70%","height":"auto","dialogClass":"highlight-modal-dialog","closeOnEscape":"true","closeText":"Close text","buttons":{"button1":{"text":"Close"}},"modal":true,"title":"The Data Governance Act (DGA)","classes":{"ui-dialog":"highlight-modal-dialog"}}}]