Source: OJ L, 2023/2854, 22.12.2023

Current language: EN

Article 30 Technical aspects of switching


Summary What does Article 30 of the Data act regulation say?

This article sets out the technical obligations on providers of data processing services to support switching and interoperability, building directly on the broader switching framework introduced in Article 23.

Crucially, the article draws a distinction between two categories of provider: those offering pure infrastructure-layer services (such as servers and networks, with no access to software or applications running on top) and all other providers.

The obligations differ significantly between these two groups, with higher interoperability and open interface requirements falling on the latter category.

Important points:

  • Providers of pure infrastructure-layer data processing services must take all reasonable measures to help customers achieve functional equivalence after switching, including by providing information, documentation, and technical support.
  • All other providers of data processing services must make open interfaces available free of charge to both customers and destination providers, and must ensure compatibility with relevant common specifications or harmonised standards within 12 months of their publication in the central Union standards repository under Article 35(8).
  • Providers of data processing services are not required to develop new technologies, disclose intellectual property rights-protected assets or trade secrets, or compromise the security and integrity of their services.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. Providers of data processing services that concern scalable and elastic computing resources limited to infrastructural elements such as servers, networks and the virtual resources necessary for operating the infrastructure, but that do not provide access to the operating services, software and applications that are stored, otherwise processed, or deployed on those infrastructural elements, shall, in accordance with Article 27, take all reasonable measures in their power to facilitate that the customer, after switching to a service covering the same service type, achieves functional equivalence in the use of the destination data processing service. The source provider of data processing services shall facilitate the switching process by providing capabilities, adequate information, documentation, technical support and, where appropriate, the necessary tools.

    1. Providers of data processing services, other than those referred to in paragraph 1, shall make open interfaces available to an equal extent to all their customers and the concerned destination providers of data processing services free of charge to facilitate the switching process. Those interfaces shall include sufficient information on the service concerned to enable the development of software to communicate with the services, for the purposes of data portability and interoperability.

    1. For data processing services other than those referred to in paragraph 1 of this Article, providers of data processing services shall ensure compatibility with common specifications based on open interoperability specifications or harmonised standards for interoperability at least 12 months after the references to those common specifications or harmonised standards for interoperability of data processing services were published in the central Union standards repository for the interoperability of data processing services following the publication of the underlying implementing acts in the Official Journal of the European Union in accordance with Article 35(8).

    1. Providers of data processing services other than those referred to in paragraph 1 of this Article shall update the online register referred to in Article 26, point (b) in accordance with their obligations under paragraph 3 of this Article.

    1. In the case of switching between services of the same service type, for which common specifications or the harmonised standards for interoperability referred to in paragraph 3 of this Article have not been published in the central Union standards repository for the interoperability of data processing services in accordance with Article 35(8), the provider of data processing services shall, at the request of the customer, export all exportable data in a structured, commonly used and machine-readable format.

    1. Providers of data processing services shall not be required to develop new technologies or services, or disclose or transfer digital assets that are protected by intellectual property rights or that constitute a trade secret, to a customer or to a different provider of data processing services or compromise the customer’s or provider’s security and integrity of service.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod