Data Act Article 6: Obligations, Deadlines & Penalties

A third party shall process the data made available to it only for the purposes and under the conditions agreed with the user and subject to Union and national law on the protection of personal data. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall erase the data when they are no longer necessary for the agreed purpose, unless otherwise agreed with the user in relation to non-personal data. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not make the exercise of choices or rights under Article 5 and this Article by the user unduly difficult, including by offering choices in a non-neutral manner, or by coercing, deceiving or manipulating the user. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not use the data it receives for profiling, unless it is necessary to provide the service requested by the user. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not make the data it receives available to another third party, unless the data is made available on the basis of a contract with the user and the other third party takes necessary measures to preserve confidentiality of trade secrets. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not make the data it receives available to an undertaking designated as a gatekeeper pursuant to Article 3 of Regulation (EU) 2022/1925. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not use the data it receives to develop a product that competes with the connected product from which the accessed data originate or share the data with another third party for that purpose. Regulation (EU) 2023/2854, Article 6, Article 6

Third parties shall not use any non-personal product data or related service data made available to them to derive insights about the economic situation, assets and production methods of, or use by, the data holder. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not use the data it receives in a manner that has an adverse impact on the security of the connected product or related service. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not disregard the specific measures agreed with a data holder or with the trade secrets holder pursuant to Article 5(9) and undermine the confidentiality of trade secrets. Regulation (EU) 2023/2854, Article 6, Article 6

The third party shall not prevent the user that is a consumer, including on the basis of a contract, from making the data it receives available to other parties. Regulation (EU) 2023/2854, Article 6, Article 6