--- title: "Article 21 — Sharing of data obtained in the context of an exceptional need with research organisations or statistical bodies" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854" source_retrieved: 2026-10-03 shortTitle: "Article 21 — Sharing of data obtained in the context of an exceptional need with research organisations or statistical bodies" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2023/2854" instrument: dataact celex: "32023R2854" regulation: Data Act regulation-full: "Regulation (EU) 2023/2854" article: 21 status: in_force object_id: eu.dataact.legal_text.article.21 text_version: "Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023" source_url: "https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng)* 1. A [public sector body](https://www.headlesslaw.com/definitions/data-act/public-sector-body), the Commission, the European Central Bank or a Union body shall be entitled to share data received under this Chapter: **(a)** with individuals or organisations in view of carrying out scientific research or analytics compatible with the purpose for which the data was requested; or **(b)** with national statistical institutes and Eurostat for the production of official statistics. 2. Individuals or organisations receiving the data pursuant to paragraph 1 shall act on a not-for-profit basis or in the context of a public-interest mission recognised in Union or national law. They shall not include organisations upon which commercial undertakings have a significant influence which is likely to result in preferential access to the results of the research. 3. Individuals or organisations receiving the data pursuant to paragraph 1 of this Article shall comply with the same obligations that are applicable to the public sector bodies, the Commission, the European Central Bank or [Union bodies](https://www.headlesslaw.com/definitions/data-act/union-bodies) pursuant to [Article 17(3)](17.md) and [Article 19](19.md). 4. Notwithstanding [Article 19(1)](19.md), point (c), individuals or organisations receiving the data pursuant to paragraph 1 of this Article may keep the data received for the purpose for which the data was requested for up to six months following erasure of the data by the public sector bodies, the Commission, the European Central Bank and Union bodies. 5. Where a public sector body, the Commission, the European Central Bank or a Union body intends to transmit or make data available under paragraph 1 of this Article, it shall notify without undue delay the [data holder](https://www.headlesslaw.com/definitions/data-act/data-holder) from whom the data was received, stating the identity and contact details of the organisation or the individual receiving the data, the purpose of the transmission or making available of the data, the period for which the data is to be used and the technical protection and organisational measures taken, including where [personal data](https://www.headlesslaw.com/definitions/data-act/personal-data) or trade secrets are involved. Where the data holder disagrees with the transmission or making available of data, it may lodge a complaint with the competent authority designated pursuant to [Article 37](37.md) of the Member State where the data holder is established. *** [Chapter V — Making data available to public sector bodies, the Commission, the European Central Bank and Union bodies based on an exceptional need](../chapters/v.md) · [← Article 20](20.md) · [Article 22 →](22.md)