European Data Governance Act (DGA) Regulation (EU) 2022/868

Abstract

The Data Governance Act seeks to increase trust in data sharing, strengthen mechanisms to increase data availability and overcome technical obstacles to the reuse of data. It supports the setup and development of Common European Data Spaces in strategic domains, involving both private and public players, in sectors such as health, environment, energy, agriculture, mobility, finance, manufacturing, public administration and skills.

The Act transparently manages risks associated with sensitive research data while enhancing access for societal benefit. Through its detailed provisions on secure data intermediation, metadata transparency, and stakeholder notifications, the DGA ensures that access to sensitive research data is as open as possible while respecting legal, ethical, and public interest constraints. The DGA sets out a structured approach to managing risks in enhancing access to sensitive data, including research data, personal data, and other data categories from public funding. The DGA introduces data intermediation services which must comply with strict governance and transparency requirements, ensuring that sensitive data is managed securely and in line with legal rights and ethical principles. It promotes technical and organizational safeguards for the reuse of sensitive data, including personal data and data protected by intellectual property rights, including data anonymization or pseudonymization. controlled access via secure data spaces. aggregated or de-identified datasets for limited forms of access. The DGA establishes a framework for "data altruism," allowing individuals and organizations to voluntarily share their data for the public good with explicit, informed consent, ensuring data subjects’ rights are respected and risks are transparently managed. Data intermediaries and providers must meet certification and monitoring standards, ensuring compliance with GDPR, cybersecurity, and other relevant frameworks.

Overview

Country	European Union
Start date	2022
Annual Budget	n/a
Responsible organisation(s)	European Commission
Target group(s)	The act targets businesses, public sector bodies, researchers, and the general public
Policy instrument type	This is a legislative measure (Regulation) designed to enforce data governance practices across the EU

Background

The DGA is part of the European strategy for data, which seeks to establish a single market for data. It addresses the need for a coordinated approach to data governance to prevent fragmented national regulations.

The Act entered into force on 23 June 2022 and, following a 15-month grace period, is applicable since September 2023.

Objective(s)

To boost the data economy by making more data available and facilitating its use across sectors and EU countries, thereby driving innovation and economic growth.

Public access URL

http://data.europa.eu/eli/reg/2022/868/oj

All tags

• Data governance for trust
• International Co-operation
• European Union
• 2022
• European Commission
• Established researchers
• Higher education institutes
• Public research institutes
• Research support staff
• Private R&D
• Academic societies academics
• Civil society
• Firms
• National government
• Strategies, agendas and plans
• Risk management and mitigation
• Coordinated procedures for sensitive data

This work is published under the responsibility of the Secretary-General of the OECD. The opinions expressed and arguments employed herein do not necessarily reflect the official views of the Member countries of the OECD.

This document, as well as any data and map included herein, are without prejudice to the status of or sovereignty over any territory, to the delimitation of international frontiers and boundaries and to the name of any territory, city or area.

© OECD 2025

   Attribution 4.0 International (CC BY 4.0)

This work is made available under the Creative Commons Attribution 4.0 International licence. By using this work, you accept to be bound by the terms of this licence (https://creativecommons.org/licenses/by/4.0/).

Attribution – you must cite the work.

Translations – you must cite the original work, identify changes to the original and add the following text: In the event of any discrepancy between the original work and the translation, only the text of original work should be considered valid.

Adaptations – you must cite the original work and add the following text: This is an adaptation of an original work by the OECD. The opinions expressed and arguments employed in this adaptation should not be reported as representing the official views of the OECD or of its Member countries.

Third-party material – the licence does not apply to third-party material in the work. If using such material, you are responsible for obtaining permission from the third party and for any claims of infringement.

You must not use the OECD logo, visual identity or cover image without express permission or suggest the OECD endorses your use of the work.

Any dispute arising under this licence shall be settled by arbitration in accordance with the Permanent Court of Arbitration (PCA) Arbitration Rules 2012. The seat of arbitration shall be Paris (France). The number of arbitrators shall be one.