Back to Frameworks

EU Data Governance Act (DGA)

European Union
v2022/868
7 domains
19 controls

Regulation (EU) 2022/868 (the Data Governance Act, DGA) establishes EU horizontal rules for data governance. It applied from 24 September 2023. The DGA creates four operational regimes framed around the European data spaces. Chapter II governs the re-use of protected data held by public sector bodies (data subject to commercial confidentiality, IP rights, statistical confidentiality or personal data): conditions for re-use, anonymisation / pseudonymisation, single information points, third-country safeguards. Chapter III regulates data intermediation services (DIS): mandatory notification, neutrality / structural separation from data-trader activities, ICT-security obligations, transparency. Chapter IV creates the data-altruism regime: voluntary registration of recognised data-altruism organisations, the European Data Altruism Consent Form, transparency and safeguarding requirements for data subjects. Chapter V designates competent authorities and grants complaint + judicial-remedy rights. Chapter VI establishes the European Data Innovation Board (EDIB) - the body the Data Act and other horizontal data instruments rely on for technical guidance. Chapter VII restricts international access and transfer of protected non-personal data held in the Union. Chapters VIII-IX cover delegation, committee procedure, penalties, evaluation by 24 September 2025 and transitional provisions (DIS notification deadline, recognised data-altruism organisations).

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

DGA - Competent Authorities (Ch V)

1 controls
Controls in the DGA - Competent Authorities (Ch V) domain of EU Data Governance Act (DGA)1 controls
CodeTitle
DGA-Art.26_27_28Competent authority requirements, complaint and judicial remedy (Articles 26-28)

DGA - Data Altruism (Ch IV)

5 controls
Controls in the DGA - Data Altruism (Ch IV) domain of EU Data Governance Act (DGA)5 controls
CodeTitle
DGA-Art.16_17Data altruism national arrangements and public registers (Articles 16-17)
DGA-Art.18_19Registration requirements and procedure (Articles 18-19)
DGA-Art.20_21Transparency and safeguarding requirements (Articles 20-21)
DGA-Art.22Rulebook (Article 22)
DGA-Art.23_24_25Competent authority + monitoring + European Data Altruism Consent Form (Articles 23-25)

DGA - Data Intermediation Services (Ch III)

3 controls
Controls in the DGA - Data Intermediation Services (Ch III) domain of EU Data Governance Act (DGA)3 controls
CodeTitle
DGA-Art.10_11Data intermediation services and notification (Articles 10-11)
DGA-Art.12Conditions for providing data intermediation services (Article 12)
DGA-Art.13_14_15Competent authorities, monitoring and exceptions (Articles 13-15)

DGA - Delegation, Committee, Penalties and Final (Ch VIII-IX)

3 controls
Controls in the DGA - Delegation, Committee, Penalties and Final (Ch VIII-IX) domain of EU Data Governance Act (DGA)3 controls
CodeTitle
DGA-Art.32_33Delegation and committee procedure (Articles 32-33)
DGA-Art.34Penalties (Article 34)
DGA-Art.35_36_37_38Evaluation, amendment of (EU) 2018/1724, transitional arrangements and entry into force (Articles 35-38)

DGA - European Data Innovation Board and International (Ch VI-VII)

2 controls
Controls in the DGA - European Data Innovation Board and International (Ch VI-VII) domain of EU Data Governance Act (DGA)2 controls
CodeTitle
DGA-Art.29_30European Data Innovation Board (Articles 29-30)
DGA-Art.31International access and transfer (Article 31)

DGA - General Provisions (Ch I)

2 controls
Controls in the DGA - General Provisions (Ch I) domain of EU Data Governance Act (DGA)2 controls
CodeTitle
DGA-Art.1Subject matter and scope (Article 1)
DGA-Art.2Definitions (Article 2)

DGA - Re-use of Protected Public Sector Data (Ch II)

3 controls
Controls in the DGA - Re-use of Protected Public Sector Data (Ch II) domain of EU Data Governance Act (DGA)3 controls
CodeTitle
DGA-Art.3_4Categories of public-sector data and prohibition of exclusive arrangements (Articles 3-4)
DGA-Art.5_6Conditions for re-use and fees (Articles 5-6)
DGA-Art.7_8_9Competent bodies, single information points and re-use request procedure (Articles 7-9)

Maps to 3 other frameworks

19 total controls
GDPR
5 source controls mapped|5 target controls covered
26%
EU Data Act
2 source controls mapped|1 target controls covered
11%
NIS2 Directive
1 source controls mapped|1 target controls covered
5%

Frequently Asked Questions

What is EU Data Governance Act (DGA)?

EU Data Governance Act (DGA) is a compliance framework from European Union with 7 domains and 19 controls. Regulation (EU) 2022/868 (the Data Governance Act, DGA) establishes EU horizontal rules for data governance. It applied from 24 September 2023. The DGA creates four operational regimes framed around the European data spaces. Chapter II governs the re-use of protected data held by public sector bodies (data subject to commercial confidentiality, IP rights, statistical confidentiality or personal data): conditions for re-use, anonymisation / pseudonymisation, single information points, third-country safeguards. Chapter III regulates data intermediation services (DIS): mandatory notification, neutrality / structural separation from data-trader activities, ICT-security obligations, transparency. Chapter IV creates the data-altruism regime: voluntary registration of recognised data-altruism organisations, the European Data Altruism Consent Form, transparency and safeguarding requirements for data subjects. Chapter V designates competent authorities and grants complaint + judicial-remedy rights. Chapter VI establishes the European Data Innovation Board (EDIB) - the body the Data Act and other horizontal data instruments rely on for technical guidance. Chapter VII restricts international access and transfer of protected non-personal data held in the Union. Chapters VIII-IX cover delegation, committee procedure, penalties, evaluation by 24 September 2025 and transitional provisions (DIS notification deadline, recognised data-altruism organisations). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does EU Data Governance Act (DGA) have?

EU Data Governance Act (DGA) has 19 controls organised across 7 domains. The largest domains are DGA - Data Altruism (Ch IV) (5 controls), DGA - Data Intermediation Services (Ch III) (3 controls), DGA - Delegation, Committee, Penalties and Final (Ch VIII-IX) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does EU Data Governance Act (DGA) map to?

EU Data Governance Act (DGA) maps to 3 other compliance frameworks. The top mapping partners are GDPR (26% coverage), EU Data Act (11% coverage), NIS2 Directive (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with EU Data Governance Act (DGA) compliance?

Start your EU Data Governance Act (DGA) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EU Data Governance Act (DGA) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 19 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required