Article 28 — Contractual transparency obligations on international access and transfer
Digital & dataLevel 1RegulationData ActApplies from 12 Sep 2025Official source
28(1)Copy link
1.Providers of data processing services shall make the following information available on their websites, and keep that information up to date:
28(1)(a)
(a)the jurisdiction to which the ICT infrastructure deployed for data processing of their individual services is subject;
Copy link28(1)(b)
(b)a general description of the technical, organisational and contractual measures adopted by the provider of data processing services in order to prevent international governmental access to or transfer of non-personal data held in the Union where such access or transfer would create a conflict with Union law or the national law of the relevant Member State.
Copy link