← Back to all briefings
Data Strategy 5 min read Published Updated Credibility 90/100

EU Data Governance Proposal

The European Commission proposed the Data Governance Act on 25 November 2020 as a cornerstone of the European strategy for data.

Accuracy-reviewed by the editorial team

Data strategy pillar illustration for Zeph Tech briefings
Data strategy, stewardship, and privacy briefings

The European Commission proposed the Data Governance Act on 25 November 2020 as a cornerstone of the European strategy for data.

Data Governance Act Proposal Overview

The European Commission proposed the Data Governance Act on 25 November 2020 as a cornerstone of the European strategy for data. The regulation establishes mechanisms to help data sharing and reuse across the EU while maintaining trust through neutral data intermediaries, creating conditions for public sector data reuse where personal data or trade secrets are involved, and supporting voluntary data altruism for the common good. The proposal represents a significant step toward creating European data spaces enabling cross-border data flows for innovation, research, and economic development.

Public Sector Data Reuse Framework

The regulation establishes conditions under which public sector bodies may permit reuse of certain protected data categories including personal data subject to GDPR, confidential business information, data protected by intellectual property rights, and data protected for statistical confidentiality. Unlike the Open Data Directive, which addresses freely available public data, the DGA provides frameworks for reuse requiring additional safeguards. Public sector bodies must ensure data protection through technical measures such as anonymization, pseudonymization, or secure processing environments that prevent re-identification or unauthorized access.

Data Intermediary Services Regulation

The regulation creates a new category of data intermediary services operating as neutral brokers helping data sharing between data holders and data users. These intermediaries must register with competent authorities and comply with requirements ensuring they remain neutral platforms rather than using shared data for their own commercial purposes. Data intermediary categories include services helping bilateral data sharing, data marketplaces, and personal data spaces enabling individuals to control sharing of their personal information.

Data Altruism Recognition Framework

The regulation establishes voluntary registration for data altruism organizations collecting and processing data made available by individuals or companies for objectives of general interest such as scientific research, healthcare improvement, or climate change mitigation. Registered organizations must comply with transparency requirements, use data only for stated general interest purposes, and operate on a not-for-profit basis. The framework aims to increase trust in voluntary data sharing by creating recognized categories of trustworthy data altruism organizations.

European Data Innovation Board

The regulation establishes the European Data Innovation Board as an expert group advising the Commission on data governance matters, coordinating setup across member states, and supporting the development of European data spaces. The Board brings together representatives from competent authorities, sector-specific data spaces, and relevant stakeholder groups to ensure coherent setup and identify opportunities for data sharing improvement.

Implementation Implications for Organizations

If you are affected, evaluate opportunities and obligations arising from the Data Governance Act framework. Data intermediary service providers must assess registration requirements and compliance obligations for neutral operation. Organizations holding valuable datasets should explore data sharing opportunities through compliant intermediary services. Research institutions and innovation-focused companies should monitor development of European data spaces relevant to their sectors, positioning to participate in data ecosystems as they mature.

Compliance Considerations

The Data Governance Act complements rather than replaces GDPR and other data protection requirements. Organizations processing personal data under DGA frameworks must maintain full GDPR compliance including lawful basis determination, data subject rights, and cross-border transfer mechanisms. Integration between DGA data intermediary services and existing data governance programs requires coordination between privacy, legal, and data management functions to ensure coherent compliance approaches.

Continue in the Data Strategy pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

Coverage intelligence

Published
Coverage pillar
Data Strategy
Source credibility
90/100 — high confidence
Topics
Data Governance Act · EU · Data sharing
Sources cited
3 sources (ec.europa.eu, iso.org)
Reading time
5 min

Further reading

  1. European Commission Official Documentation — gov
  2. Analysis — industry
  3. ISO 8000-2:2022 — Data Quality Management — International Organization for Standardization
  • Data Governance Act
  • EU
  • Data sharing
Back to curated briefings

Comments

Community

We publish only high-quality, respectful contributions. Every submission is reviewed for clarity, sourcing, and safety before it appears here.

    Share your perspective

    Submissions showing "Awaiting moderation" are in review. Spam, low-effort posts, or unverifiable claims will be rejected. We verify submissions with the email you provide, and we never publish or sell that address.

    Verification

    Complete the CAPTCHA to submit.