§ Data Act · Article 36
Data Act Article 36: Obligations, Deadlines & Penalties
At a glance
Article 36 of the Data Act imposes 12 obligations on Commission, Member State, vendor of a smart contract or person deploying smart contracts for others and 1 other entity type(s).
§ Obligations
All obligations under Article 36
Obligation 1
Ensure that smart contracts used for executing data sharing agreements comply with essential requirements regarding robustness, access control, safe termination, data archiving, and consistency with the agreement terms.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
vendor of an application using smart contracts or person deploying smart contracts for others
- Action required
-
ensure
- Deadline
-
—
- Penalty
-
—
Obligation 2
Perform a conformity assessment to fulfill the essential requirements laid down in paragraph 1 and issue an EU declaration of conformity upon fulfillment.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
vendor of a smart contract or person deploying smart contracts for others
- Action required
-
assess
- Deadline
-
—
- Penalty
-
—
Obligation 3
Issue an EU declaration of conformity upon fulfillment of the essential requirements laid down in paragraph 1.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
vendor of a smart contract or person deploying smart contracts for others
- Action required
-
issue
- Deadline
-
—
- Penalty
-
—
Obligation 4
Be responsible for compliance with the essential requirements laid down in paragraph 1 by drawing up the EU declaration of conformity.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
vendor of an application using smart contracts or person deploying smart contracts for others
- Action required
-
be responsible
- Deadline
-
—
- Penalty
-
—
Obligation 5
Request one or more European standardisation organisations to draft harmonised standards that satisfy the essential requirements laid down in paragraph 1.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
request
- Deadline
-
—
- Penalty
-
—
Obligation 6
Adopt common specifications covering essential requirements via implementing acts if harmonised standards are not accepted, delivered, or compliant, and no reference is published.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
adopt
- Deadline
-
—
- Penalty
-
—
Obligation 7
Inform the committee referred to in Article 22 of Regulation (EU) No 1025/2012 that the conditions for adopting common specifications have been fulfilled before preparing a draft implementing act.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
inform
- Deadline
-
—
- Penalty
-
—
Obligation 8
Take into account the advice of the EDIB and views of other relevant bodies or expert groups and duly consult all relevant stakeholders when preparing the draft implementing act.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
consult
- Deadline
-
—
- Penalty
-
—
Obligation 9
Assess the harmonised standard in accordance with Regulation (EU) No 1025/2012 when it is adopted by a European standardisation organisation and proposed for publication.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
assess
- Deadline
-
—
- Penalty
-
—
Obligation 10
Repeal the implementing acts referred to in paragraph 6, or parts thereof, which cover the same essential requirements as those covered by a published harmonised standard.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
repeal
- Deadline
-
—
- Penalty
-
—
Obligation 11
Inform the Commission by submitting a detailed explanation if a Member State considers that a common specification does not entirely satisfy the essential requirements.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Member State
- Action required
-
inform
- Deadline
-
—
- Penalty
-
—
Obligation 12
Assess the detailed explanation submitted by a Member State regarding common specifications and amend the implementing act if appropriate.
Regulation (EU) 2023/2854, Article 36, Article 36
- Obligated entity
-
Commission
- Action required
-
assess
- Deadline
-
—
- Penalty
-
—
§ Frequently asked
Questions about Article 36
Who must comply with Article 36 of the Data Act?
+
Commission, Member State, vendor of a smart contract or person deploying smart contracts for others, vendor of an application using smart contracts or person deploying smart contracts for others.
What does Article 36 of the Data Act require?
+
ensure assess issue