Data Strategy Briefing — March 17, 2021

Executive briefing: As part of the European Data Strategy announced in February 2020, the European Commission published detailed plans in March 2021 for creating common European data spaces across nine strategic sectors: health, agriculture, manufacturing, energy, mobility, finance, public administration, skills, and green deal. These data spaces aim to overcome fragmentation by establishing technical, semantic, and legal interoperability standards that enable data sharing within and across sectors while respecting GDPR requirements and fundamental rights. Organizations operating in Europe should understand data space architecture principles, governance models, and participation pathways as pilots launch in 2021-2022 and mandatory requirements emerge through the proposed Data Act and Data Governance Act.

Data space architecture principles

European data spaces are built on common technical and governance foundations designed to enable trustworthy data sharing at scale:

• Federated architecture: Data spaces use distributed architectures where data remains with originating parties and is accessed via standardized APIs rather than centralized in single repositories. This preserves data sovereignty and control while enabling authorized querying and analysis.
• Semantic interoperability: Common data models, ontologies, and vocabularies ensure that data from diverse sources can be meaningfully combined. Sector-specific data spaces define standard taxonomies (e.g., HL7 FHIR for health, INSPIRE for geospatial data) that participants must adopt.
• Trust framework: Identity management, authentication, and authorization mechanisms built on standards such as eIDAS digital identities enable secure data exchange. Access control policies enforced through smart contracts or policy engines ensure data usage aligns with owner consent and regulatory requirements.
• Metadata catalogs: Searchable catalogs document available datasets, access conditions, quality metrics, and usage licenses. Organizations can discover relevant data sources without exposing underlying data until access agreements are established.
• Usage control: Technical measures enforce data usage restrictions after access is granted. Technologies such as secure multi-party computation, differential privacy, and trusted execution environments enable analytics while preventing unauthorized copying or repurposing.

Sectoral data space initiatives

Nine priority data spaces address distinct policy goals and industry needs:

• Health data space: Enables cross-border access to electronic health records, medical imaging, genomic data, and clinical trial information for research and secondary use. Pilot projects focus on rare disease registries, precision medicine, and pandemic response coordination.
• Agriculture data space: Connects farm management systems, IoT sensor networks, satellite imagery, and supply chain data to optimize resource usage, improve sustainability, and enhance food safety traceability. ATLAS project demonstrates interoperability across multiple agricultural data platforms.
• Manufacturing data space (Gaia-X): Provides federated cloud infrastructure and data sharing framework for industrial data. Focuses on digital twins, predictive maintenance, supply chain visibility, and collaborative product development across manufacturing value chains.
• Energy data space: Integrates smart meter data, grid operations, renewable energy forecasts, and electric vehicle charging to optimize energy system flexibility and accelerate clean energy transition. Supports dynamic pricing and demand response programs.
• Mobility data space: Combines public transport schedules, traffic management, parking, micro-mobility, and logistics data to enable multimodal journey planning, fleet optimization, and urban mobility planning.
• Financial data space: Facilitates secure sharing of credit, payment, and risk data while respecting PSD2 and GDPR constraints. Aims to improve financial inclusion, combat fraud, and enable more accurate credit assessments.
• Public administration data space: Enables once-only principle where citizens and businesses provide information to governments once, which is then shared across agencies as needed. Reduces administrative burden and improves service delivery.
• Skills data space: Connects education records, professional certifications, and labor market data to enable skills matching, credential verification, and personalized learning recommendations. Supports workforce mobility and lifelong learning.
• Green Deal data space: Aggregates environmental monitoring, emissions reporting, circular economy data, and sustainability metrics to track progress toward climate goals and inform policy decisions.

Governance and participation models

Data spaces operate under multi-stakeholder governance structures that balance public interest, commercial incentives, and individual rights:

• Data space operators: Non-profit entities or public-private partnerships manage technical infrastructure, enforce interoperability standards, and resolve disputes. Operators do not own or control data but facilitate exchange according to agreed rules.
• Participation criteria: Organizations wishing to join data spaces must meet technical requirements (API standards, data quality thresholds), legal requirements (GDPR compliance, liability insurance), and governance requirements (adherence to code of conduct, participation in governance bodies).
• Business models: Data spaces support diverse commercial models including data marketplaces, subscription services, usage-based pricing, and reciprocal data sharing agreements. Commission guidelines emphasize fair and transparent pricing to prevent monopolistic behavior.
• Public sector role: Governments provide anchor datasets (geospatial, business registers, transport infrastructure) and establish legal frameworks through sector-specific regulations. Public procurement can incentivize data space participation by requiring interoperability.
• Dispute resolution: Data spaces establish processes for resolving access disputes, quality complaints, and usage violations. Escalation paths include internal review, industry arbitration, and regulatory enforcement by national data authorities.

Legal and regulatory integration

Data spaces exist within evolving legal frameworks that define rights, obligations, and enforcement mechanisms:

• Data Governance Act: Establishes rules for data intermediaries, data altruism organizations, and cross-border data sharing within the EU. Sets requirements for data space operators including transparency, neutrality, and cybersecurity standards.
• Data Act: Creates rights to access data generated by connected products and services, mandates interoperability for data processing services, and regulates unfair contractual terms in B2B data sharing. Data spaces must implement mechanisms to fulfill data portability and access rights.
• Digital Markets Act: Requires gatekeepers to enable data portability and interoperability with third parties. Data spaces provide technical infrastructure to exercise these rights at scale.
• Sector regulations: Domain-specific rules (eHealth Network guidelines, Open Banking standards, smart metering regulations) define mandatory data sharing scenarios that data spaces operationalize.
• GDPR alignment: Data spaces must respect consent requirements, purpose limitation, data minimization, and data subject rights. Technical architectures implement privacy-by-design principles including pseudonymization, encryption, and audit logging.

Implementation roadmap for organizations

Organizations should prepare for data space participation through structured planning:

• Phase 1: Assessment and readiness (2021-2022): Identify relevant sector data spaces based on operational domains. Evaluate current data management maturity, API capabilities, and technical gaps. Participate in pilot programs to gain experience and influence standards development.
• Phase 2: Technical preparation (2022-2023): Implement standardized APIs, adopt sector-specific data models, and deploy metadata management systems. Upgrade identity and access management to support federated authentication. Establish data quality monitoring and governance processes.
• Phase 3: Ecosystem engagement (2023-2024): Join data space governance bodies, contribute to best practice development, and establish reciprocal data sharing agreements with partners. Develop business cases for monetizing data assets within data space frameworks.
• Phase 4: Scale and integration (2024+): Extend data space participation to multiple sectors, integrate data space capabilities into core business processes, and leverage insights from cross-sector data combinations. Advocate for policy refinements based on operational experience.

Action plan

• Conduct data asset inventory to identify datasets with potential value in sectoral data spaces. Assess legal rights to share (ownership, licensing, third-party restrictions) and technical feasibility of exposing via standardized APIs.
• Engage with sector-specific data space initiatives relevant to organizational operations. Attend stakeholder workshops, review draft standards, and submit feedback during consultation processes.
• Pilot participation in one priority data space to build organizational capability and identify implementation challenges. Select use cases with clear business value (cost reduction, new revenue, regulatory compliance) to justify investment.
• Update data governance frameworks to address data sharing scenarios. Define roles and responsibilities for approving data sharing agreements, monitoring usage, and handling disputes. Align policies with Data Governance Act and Data Act requirements.
• Invest in technical capabilities for data space participation: API management platforms, metadata tools, consent management systems, and usage control technologies. Budget for ongoing maintenance and standards updates as data spaces evolve.

Zeph Tech analysis

European data spaces represent a pragmatic middle path between closed data silos and uncontrolled data sharing. By combining technical interoperability standards, governance frameworks, and legal rights, the Commission aims to unlock data's economic and social value while preserving European values around privacy, sovereignty, and fair competition. This approach contrasts with dominant U.S. platform models that centralize data control and Chinese state-driven data infrastructure.

Organizations should anticipate that data space participation will transition from voluntary to mandatory as sector regulations incorporate interoperability requirements. Early participants gain influence over standard-setting, build operational expertise, and establish strategic partnerships before markets consolidate. Laggards risk competitive disadvantage as data-driven business models become industry baseline.

The federated architecture of data spaces aligns with zero-trust security principles and distributed system designs that many organizations already pursue. Rather than requiring wholesale architectural changes, data spaces leverage existing API infrastructure and extend it with interoperability layers. Organizations with mature API management, data catalogs, and access control systems can participate more easily than those with monolithic legacy systems.

Cross-sector data spaces create opportunities for novel business models and services that combine previously siloed information. For example, mobility-as-a-service platforms can integrate transport, payment, and carbon footprint data to offer personalized sustainable travel options. Organizations should think beyond current industry boundaries when identifying data space opportunities.

Related briefings

Curated signals from the same pillar or overlapping topics.

Data Strategy · Credibility 40/100 · December 6, 2021

Data Strategy Briefing — December 6, 2021

OECD governments adopted a binding recommendation on enhancing access to and sharing of data, giving enterprises a global benchmark for trustworthy data governance, cross-border collaboration, and value-realisation…

Data Strategy · Credibility 91/100 · February 10, 2021

Data Strategy Briefing — EDPB and EDPS joint opinion on the Data Governance Act

On 10 February 2021 the EDPB and EDPS issued a joint opinion on the EU Data Governance Act, demanding stronger safeguards for data intermediaries, clearer roles for public-sector data reuse, and privacy-by-design…

Data Strategy · Credibility 87/100 · January 19, 2021

Data Strategy Briefing — January 19, 2021

ASEAN’s 2021 Data Management Framework and Model Contractual Clauses give regional operators a structured roadmap for governance maturity, transfer risk assessments, and legally robust cross-border data agreements.

Data Strategy · Credibility 90/100 · November 25, 2020

Data Strategy Briefing — November 25, 2020

EU proposes Data Governance Act framework.

Data Strategy · Credibility 40/100 · November 30, 2021

Data Strategy Briefing — November 30, 2021

Expanded briefing on the provisional Data Governance Act agreement with governance, neutrality, and board oversight steps anchored in primary EU sources.

Continue in the Data Strategy pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

• Data Strategy Operating Model Guide — Zeph Tech

  Design a data strategy operating model that satisfies the EU Data Act, EU Data Governance Act, U.S. Evidence Act, and Singapore Digital Government policies with measurable…

• Data Interoperability Engineering Guide — Zeph Tech

  Engineer interoperable data exchanges that satisfy the EU Data Act, Data Governance Act, European Interoperability Framework, and ISO/IEC 19941 portability requirements.

• Data Stewardship Operating Model Guide — Zeph Tech

  Establish accountable data stewardship programmes that meet U.S. Evidence Act mandates, Canada’s Directive on Service and Digital, and OECD data governance principles while…