PTS is the competent authority for parts of the EU Data Governance Act (DGA).

The EU Data Governance Act (also called the DGA) became applicable in September 2023. The purpose of the DGA is to increase data sharing by improving trust for it and overcoming technical obstacles for the re-use of data.

From 2 august 2024 and onward, PTS is the competent authority for parts of the DGA regulating data intermediation service providers and data altruism organisations. PTS also has certain responsibilities with respect to the re-use of protected data.

The Data Governance Act entails, among other things, that PTS will:

  • provide procedures for notification and registering,
  • conduct supervision,
  • receive and handle complaints, and
  • participate in the European Data Innovation Board (EDIB).

EU's Data governance act (DGA)

More information

What is a data intermediation service

A data intermediation service is a service which aims to establish commercial relationships for the purposes of data sharing. Data intermediation services are supposed to function as neutral middlemen who links individuals and companies with data users, for the purpose of data sharing. The definition of data intermediation service can be found in article 2.11 of the DGA.

Obligation to notify

Organisations that provide any of the intermediation services accounted for in article 10 of the DGA are required to notify PTS before commencing such activities. Such a notification is made through PTS’ e-service.

Notify PTS on intermediation services in PTS’ e-service

In order to use the e-service you must first be authenticated as a representative of the data intermediation services provider that is notifying PTS. Authentication can be made through BankID, Freja eID QA, and Foreign eID QA.

Thereafter, you will be asked to fill a form which will serve as a basis for when PTS makes the assessment of whether your organisation fulfils the obligations of data intermediation service providers found in article 12 of the DGA.

When submitting your notification, there is an option to ask for a confirmation that the submitted notification contains all the information needed. In that case, PTS will send such a confirmation within one week.

PTS informs the European Commission without delay of any new notification by a data intermediation service provider. The Commission keeps a public record of all registered data intermediation service providers within the EU.

The label ‘data intermediation services provider recognised in the Union’ and the common logo

Data intermediation service providers must comply with the conditions in article 12 of the DGA. At the request of a supplier, PTS must confirm that a service provider is compliant with articles 11 and 12 of the DGA. After such a confirmation, the service provider may use the label ‘data intermediation services provider recognised in the Union’ and a common logo.

Get logos for data intermediaries and data altruism organisations recognised in the Union

A data intermediation service provider wanting to use the above label and logo should send their request by email to pts@pts.se with the subject “Request data intermediation services provider recognised in the Union”.

Deregistration and changes

Data intermediation service providers are obligated to communicate any changes to the notified information to PTS within 14 days. Should the service provider cease its operations, it must notify PTS within 15 days.

Deregistration or changes of notified information is made by email to pts@pts.se with the subject “Deregistration of data intermediation service provider” or “Changes of notification”. The email should contain the reasons for deregistration alternatively which changes you would like of the notified information.

Appeal

If you are dissatisfied with a decision from PTS, you may appeal that decision. Any appeal should be sent to PTS within three weeks of the day on which you received the decision in accordance with the appeal instruction appended to the decision.

What is data altruism

Data altruism is the voluntary sharing of data on the basis of consent of data subjects to process their personal data or permissions of data holders to allow the use of their non-personal data for objectives of general interest. Those who share the data must do so without demanding or receiving compensation. A data altruism organisation is an organisation that carry out data altruism activities.

Apply to be registrated in the public national register

A data altruism organisation may apply to be registered in the public national register. After being registered, the data altruism organisation may use the label ‘data altruism organisation recognised in the Union’ and a common logo. It is not mandatory for a data altruism organisation to be registered. The application for registration is through PTS’ e-service.

Apply for registration in PTS’ e-service

Get logos for data intermediaries and data altruism organisations recognised in the Union

In order to use the e-service you must first be authenticated as a representative of the data intermediation services provider that is notifying PTS. Authentication can be made through BankID, Freja eID QA, and Foreign eID QA.

Thereafter, you will be asked to fill a form which will serve as a basis for when PTS makes the assessment of whether your organisation is compliant with the obligations of data altruism organisations found in, i.a., article 18 of the DGA. Supporting documents may be submitted in the formats docx or PDF.

When the application has been submitted, PTS will assess it and communicate a decision within 12 weeks.

Deregistration and changes

Data altruism organisations are obligated to communicate any changes to the registered information to PTS within 14 days.

A data altruism organisation wanting to be registered or changing the registered information should send an email to pts@pts.se with the subject “Deregistration data altruism organisation” or “Change of information”. The email should, if applicable, contain information on the changes that are being requested.

Appeal

If you are dissatisfied with a decision from PTS, you may appeal that decision. Any appeal should be sent to PTS within three weeks of the day on which you received the decision in accordance with the appeal instruction appended to the decision.

The DGA regulates certain cases of re-use of protected data. The term ‘re-use’ means that data is being used for a purpose other than the initial purpose within the public task for which the data were produced. Public sector bodies that allow re-use may lay down certain conditions for the re-use, for the purpose of ensuring that the protected nature of the data is preserved. There are additional requirements if a re-user intends to transfer such protected data to a third country.

PTS supervises compliance of the rules concerning the transfer of protected data to third countries. Public sector bodies that have allowed the re-use of data are obligated to report to PTS should they have any knowledge of a situation where a re-user has unlawfully transferred protected data to a third country.

The European Data Innovation Board (EDIB) has been established under the DGA. EDIB consists of an expert group with, inter alia, representatives from the competent authorities of Member States. The purpose is to facilitate the exchange on best practices, particularly regarding data intermediation, data altruism, and the use of public data. EDIB will also treat questions of prioritisation of cross-sector interoperability standards.

PTS investigates complaints against data intermediation service providers and recognized data altruism organisations. Complaints may be sent to pts@pts.se.

PTS will always inform the person that has filed a complaint of whether it has led to any action by PTS.

Sidan uppdaterades: