DSA data access portal
1. The Commission shall establish and host a DSA data access portal.
2. The DSA data access portal shall have the following functions:
(a)
support and streamline the management of the data access process for researchers, data providers and Digital Services Coordinators;
(b)
serve as the central digital point for information on the data access process and facilitate the information exchanges pursuant to this Regulation among applicant researchers, vetted researchers, data providers and Digital Services Coordinators.
3. The DSA data access portal shall be interoperable with the information sharing system AGORA established by Implementing Regulation (EU) 2024/607. The Digital Services Coordinators shall have access in AGORA to the information submitted through the DSA data access portal.
4. Data providers shall have an account on the DSA data access portal.
5. To participate in the data access process, applicant researchers shall have an account on the DSA data access portal.
Roles and responsibilities for processing personal data in the DSA data access portal
1. Digital Services Coordinators shall be separate controllers with respect to the processing of personal data they carry out to manage the data access process and for publication of relevant information.
2. The Commission shall be a processor of personal data processed within the DSA data access portal.
3. The responsibilities of the Commission as processor for data processing activities conducted in the DSA data access portal shall be as set out in the Annex.
Processing of personal data in the DSA data access portal
1. Where personal data are registered in and exchanged via the DSA data access portal, the processing shall take place only in so far as it is proportionate and necessary for the purpose of the data access process and publication of relevant information.
2. The processing of personal data shall take place in the DSA data access portal only in respect of the following categories of data subjects:
(a)
natural persons having an account on the DSA data access portal;
(b)
natural persons whose personal data is contained in the DSA data access portal or in any other exchange pursuant to this Regulation concerning the data access process.
3. The processing of personal data shall take place in the DSA data access portal only in respect of the following categories of personal data:
(a)
identity data, such as name, user ID;
(b)
contact information such as address, email address, contact details;
(c)
personal data contained in the documentation demonstrating the affiliation to a research organisation, and any other personal information deemed necessary for the purpose of participating in the data access process.
4. The processing of personal data referred to in paragraph 1 shall be performed using information technology infrastructure located in the European Economic Area.
Points of contact and public information on the data access process
1. Each Digital Services Coordinator and each data provider shall establish a dedicated point of contact, whose task shall be to provide information and support on the data access process.
2. The Digital Services Coordinators and data providers shall communicate their points of contact to the Commission, as soon as possible. The Commission shall publish the details of the points of contact referred to in paragraph 1 in the public interface of the DSA data access portal.
3. Each Digital Services Coordinator shall make available and easily findable on its online interface, the details of the point of contact established pursuant to paragraph 1 together with a link to the DSA data access portal.
4. Data providers shall make the following information available and easily findable on their online interfaces:
(a)
the details of the point of contact established by them pursuant to paragraph 1;
(b)
a link to the DSA data access portal;
(c)
a DSA data catalogue, which describes the data assets, that may be accessed for the purposes set out in Article 40(4) of Regulation EU 2022/2065, as well as their data structure and metadata;
(d)
suggested access modalities for the data in the catalogue pursuant to point (c), adequate to the level of sensitivity of the different data assets.
5. The information referred to in paragraph 4, points (c) and (d), shall be regularly updated, in particular to reflect data related to the risk assessments carried out pursuant to Article 34 of Regulation (EU) 2022/2065 and the audits carried out pursuant to Article 37 of that Regulation.
Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.
