--- title: "Article 6 — Obligations of third parties receiving data at the request of the user" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854" source_retrieved: 2026-10-03 shortTitle: "Article 6 — Obligations of third parties receiving data at the request of the user" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2023/2854" instrument: dataact celex: "32023R2854" regulation: Data Act regulation-full: "Regulation (EU) 2023/2854" article: 6 status: in_force object_id: eu.dataact.legal_text.article.6 text_version: "Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023" source_url: "https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng)* 1. A third party shall process the data made available to it pursuant to [Article 5](5.md) only for the purposes and under the conditions agreed with the user and subject to Union and national law on the protection of [personal data](https://www.headlesslaw.com/definitions/data-act/personal-data) including the rights of the [data subject](https://www.headlesslaw.com/definitions/data-act/data-subject) insofar as personal data are concerned. The third party shall erase the data when they are no longer necessary for the agreed purpose, unless otherwise agreed with the user in relation to [non-personal data](https://www.headlesslaw.com/definitions/data-act/non-personal-data). 2. The third party shall not: **(a)** make the exercise of choices or rights under [Article 5](5.md) and this Article by the user unduly difficult, including by offering choices to the user in a non-neutral manner, or by coercing, deceiving or manipulating the user, or by subverting or impairing the autonomy, decision-making or choices of the user, including by means of a user digital interface or a part thereof; **(b)** notwithstanding Article 22(2), points (a) and (c), of Regulation (EU) 2016/679, use the data it receives for the [profiling](https://www.headlesslaw.com/definitions/data-act/profiling), unless it is necessary to provide the service requested by the user; **(c)** make the data it receives available to another third party, unless the data is made available on the basis of a contract with the user, and provided that the other third party takes all necessary measures agreed between the [data holder](https://www.headlesslaw.com/definitions/data-act/data-holder) and the third party to preserve the confidentiality of trade secrets; **(d)** make the data it receives available to an undertaking designated as a gatekeeper pursuant to Article 3 of Regulation (EU) 2022/1925; **(e)** use the data it receives to develop a product that competes with the [connected product](https://www.headlesslaw.com/definitions/data-act/connected-product) from which the accessed data originate or share the data with another third party for that purpose; third parties shall also not use any non-personal [product data](https://www.headlesslaw.com/definitions/data-act/product-data) or [related service data](https://www.headlesslaw.com/definitions/data-act/related-service-data) made available to them to derive insights about the economic situation, assets and production methods of, or use by, the data holder; **(f)** use the data it receives in a manner that has an adverse impact on the security of the connected product or related service; **(g)** disregard the specific measures agreed with a data holder or with the trade secrets holder pursuant to [Article 5(9)](5.md) and undermine the confidentiality of trade secrets; **(h)** prevent the user that is a consumer, including on the basis of a contract, from making the data it receives available to other parties. *** [Chapter II — Business-to-consumer and business-to-business data sharing](../chapters/ii.md) · [← Article 5](5.md) · [Article 7 →](7.md)