Article 28 Data Act — Regulation (EU) 2023/2854 of the European Parliament and of…

Article 28

Data Act

Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828 (Data Act) (Text with EEA relevance) · European Union

1. Providers of data processing services shall make the following information available on their websites, and keep that information up to date: the jurisdiction to which the ICT infrastructure deployed for data processing of their individual services is subject; a general description of the technical, organisational and contractual measures adopted by the provider of data processing services in order to prevent international governmental access to or transfer of non-personal data held in the Union where such access or transfer would create a conflict with Union law or the national law of the relevant Member State. 2. The websites referred to in paragraph 1 shall be listed in contracts for all data processing services offered by providers of data processing services.

← art_27__para · All articles · art_28__para_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-13 · Text as adopted (Official Journal); later amendments are not incorporated in this text.