Source: OJ L, 2023/2854, 22.12.2023

Current language: EN

Article 26 Information obligation of providers of data processing services


Summary What does Article 26 of the Data act regulation say?

This short but practical article sits within the broader framework on switching between data processing services and places a transparency obligation on providers.

It requires providers to equip their customers with the information needed to understand how switching and porting works in practice, and to point them to a live online register detailing the technical formats and standards applicable to their exportable data.

It complements the contractual requirements set out in Article 25 by ensuring customers have access to the operational detail that makes those contractual rights meaningful.

Important points:

  • Providers of data processing services are required to supply customers with information on switching and porting procedures, including known methods, formats, restrictions, and technical limitations.
  • Providers of data processing services must maintain and reference an up-to-date online register covering data structures, formats, standards, and open interoperability specifications for exportable data.
  • The exportable data referenced in the register links directly to the categories defined in Article 25(2), point (e), tying this disclosure obligation to the broader switching framework.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

The provider of data processing services shall provide the customer with:

  1. information on available procedures for switching and porting to the data processing service, including information on available switching and porting methods and formats as well as restrictions and technical limitations which are known to the provider of data processing services;

  2. a reference to an up-to-date online register hosted by the provider of data processing services, with details of all the data structures and data formats as well as the relevant standards and open interoperability specifications, in which the exportable data referred to in Article 25(2), point (e), are available.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod