<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2023-12-22","gaps":[],"covered":["Data Act L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/data-act/recitals/43","url":"https://www.headlesslaw.com/data-act/recitals/43","title":"Recital 43","family":"l1_recital_view","work_id":"dataact","view_of":"/data-act/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854","valid_from":"2023-12-22","valid_until":null,"content_id":"4de0628b51606e33","versions":["2023-12-22"],"version_url":"https://www.headlesslaw.com/data-act/recitals/43/versions/2023-12-22","revision_url":"https://www.headlesslaw.com/data-act/recitals/43/versions/2023-12-22/rev/4de0628b51606e33","versions_url":"https://www.headlesslaw.com/data-act/recitals/43/versions","relations_url":"https://www.headlesslaw.com/data-act/recitals/43/relations","act_url":"https://www.headlesslaw.com/data-act/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"dataact","path":"/data-act/recitals","name":"Data Act","number":"Regulation (EU) 2023/2854","celex":"32023R2854","title_official":null,"document_date":null},"position":{"kind":"recital","key":"43","index":43,"articles":119,"annexes":0},"prev":{"path":"/data-act/recitals/42","key":"42","title":"Recital 42"},"next":{"path":"/data-act/recitals/44","key":"44","title":"Recital 44"},"act_anchor":""}}} -->
# Recital 43

*In force · Regulation (EU) 2023/2854, OJ L, 2023/2854, 22.12.2023 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854)*

On the basis of the principle of contractual freedom, parties should remain free to negotiate the precise conditions for making data available in their contracts within the framework for the general access rules for making data available. Terms of such contracts could include technical and organisational measures, including in relation to data security.