In this act Article 5 of 16

Article 5 — Processing of personal data in the DSA data access portal

Digital & dataLevel 2Delegated RegulationDSAIn forceOfficial source

1.Where personal data are registered in and exchanged via the DSA data access portal, the processing shall take place only in so far as it is proportionate and necessary for the purpose of the data access process and publication of relevant information.

Copy link

5(2)

2.The processing of personal data shall take place in the DSA data access portal only in respect of the following categories of data subjects:

Copy link

5(2)(a)

(a)natural persons having an account on the DSA data access portal;

Copy link

5(2)(b)

(b)natural persons whose personal data is contained in the DSA data access portal or in any other exchange pursuant to this Regulation concerning the data access process.

Copy link

5(3)

3.The processing of personal data shall take place in the DSA data access portal only in respect of the following categories of personal data:

Copy link

5(3)(a)

(a)identity data, such as name, user ID;

Copy link

5(3)(b)

(b)contact information such as address, email address, contact details;

Copy link

5(3)(c)

(c)personal data contained in the documentation demonstrating the affiliation to a research organisation, and any other personal information deemed necessary for the purpose of participating in the data access process.

Copy link

5(4)

4.The processing of personal data referred to in paragraph 1 shall be performed using information technology infrastructure located in the European Economic Area.

Copy link