← Ireland

S.I. No. 734/2024 - European Union (Data Governance Act) (No. 2) Regulations 2024

Obsah (5)Article 18Article 11Article 19Article 21Article 31

Act) (No. 2) Regulations 2024 Skip to content Disclaimer Feedback Helpdesk Gaeilge Léim go dtí an t-ábhar Séanadh Aiseolas Deasc chabhrach English Gaeilge English Produced by the

fice

the Attorney General Táirgthe ag Oifig an Ard-Aighne Home Legislation Acts

the Oireachtas Statutory Instruments Pre-1922 Legislation Constitution External Resources Bills (Houses

the Oireachtas) Iris Oifigiúil /

ficial Gazette Revised Acts (LRC) Classified List

Legislation (LRC) Translations (acts.ie) Translations (Houses

the Oireachtas) Government Publications for Sale EU Law (EUR-Lex) FAQ Disclaimer Feedback Helpdesk Search Baile Reachtaíocht Achtanna an Oireachtais Ionstraimí Reachtúla Reachtaíocht Réamh-1922 Bunreacht Acmhainní Seachtracha Billí (Tithe an Oireachtais) Iris Oifigiúil Achtanna Athbhreithnithe (CAD) (An Coimisiún um Athchóiriú an Dlí) Liosta Rangaithe Reachtaíochta Aistriúcháin (achtanna.

  1. ie)Aistriúcháin (Tithe an Oireachtais) Foilseacháin Rialtais ar Díol Dlí AE (EUR-Lex) CCanna (Ceisteanna Coitianta) Séanadh Aiseolas Deasc chabhrach Cuardach TitleTeideal Year(
  2. s)or rangeBliain nó blianta nó raon TypeCineál All Legislation Acts Statutory Instruments Advanced SearchCuardach Casta HomeBaile Statutory InstrumentsIonstraimí Reachtúla 2024 S.I. No. 734/2024 - European Union (Data Governance Act) (No. 2) Regulations 2024 S.I. No. 734/2024 - European Union (Data Governance Act) (No. 2) Regulations 2024 AmendmentsLeasuithe Download PDF Íoslódáil PDF Notice

the making

this Statutory Instrument was published in “Iris Oifigiúil”

31st December, 2024. The Minister for the Environment, Climate and Communications, in exercise

the powers conferred on him by section 3

the European Communities Act 1972 (No. 27

1972) and for the purposes

giving full effect to Chapters III, IV, V, VII and IX

Regulation (EU) 2022/868

the European Parliament and

the Council

30 May 20221 , hereby make the following regulations: Citation

  1. These Regulations may be cited as the European Union (Data Governance Act) (No. 2) Regulations
  2. Definitions 2.

(1)In these Regulations – “Act

2014” means the Competition and Consumer Protection Act 2014 (No. 29

2014); “authorised

ficer” has the same meaning as it has in the Act

2014; “competent authority” means the body designated as the competent authority under Regulation 3; “contravention notice” means a notice under Regulation 10

(1); “EU Regulation” means Regulation (EU) 2022/868

the European Parliament and

the Council

30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act)1 ; “information notice” means a notice under Regulation 9

(1); “register” means the register established pursuant to Regulation 6
(1).
(2)A word or expression used in these Regulations and which is also used in the EU Regulation has, unless the context otherwise requires, the same meaning in these Regulations as it has in the EU Regulation. Competent authority 3. For the purposes

these Regulations and the EU Regulation, the Competition and Consumer Protection Commission is designated as the competent authority in the State for – (a) data intermediation services, and (b) the registration

data altruism organisations. Legal representative 4.

(1)A data intermediation services provider referred to in Article 11
(3)

the EU Regulation or an entity referred to in Article 19

(3)

the EU Regulation shall designate a legal representative in a Member State in which it

fers services.

(2)The competent authority may address the legal representative in addition to or instead

the data intermediation services provider or the entity concerned for the purposes

monitoring and ensuring compliance with the EU Regulation and these Regulations, including for the purpose

initiating proceedings under these Regulations. Notification for data intermediation services 5.

(1)A data intermediation services provider who intends to provide the data intermediation services referred to in Article 10

the EU Regulation shall submit the notification referred to in Article 11

the EU Regulation to the competent authority, in such form and manner as the competent authority may specify.

(2)If the notification under paragraph
(1)does not contain the information specified in Article 11
(6)

the EU Regulation, the competent authority may request the applicant to submit such additional information, as the competent authority considers necessary, within the period and in the manner specified by the competent authority. Register for recognised data altruism organisations 6.

(1)The competent authority shall establish and maintain a national register

recognised data altruism organisations.

(2)An entity that meets the requirements

Article 18

the EU Regulation may submit an application to the competent authority for entry in the register.

(3)An application referred to in paragraph
(2)shall contain the information specified in Article 19
(4)

the EU Regulation and be in such form and manner as the competent authority may specify.

(4)If an application for entry in the register does not contain the information referred to in Article 19
(4)

the EU Regulation or if further documentation is required to demonstrate that the requirements

Article 18

the EU Regulation are satisfied, the competent authority may request the applicant to submit such additional information, as the competent authority considers necessary, within the period and in the manner specified by the competent authority.

(5)The competent authority shall, no later than 12 weeks after the date

receipt

an application under paragraph

(2)or the date

receipt

additional information pursuant to a request under paragraph

(4), whichever occurs later, give notice to the applicant

its decision to – (a) enter the data altruism organisation in the register where it satisfies the requirements

Article 18

the EU Regulation, or (b) refuse the application for entry in the register.

(6)Where the competent authority makes a decision under paragraph
(5)(b), the notice shall inform the person

– (

  1. a)the reason for the refusal, and (
  2. b)the right to appeal the notice under Regulation 12.

(7)The register shall be published on a website maintained by or on behalf

the competent authority.

(8)A recognised data altruism organisation shall, not later than 30 June each year, prepare and furnish an annual activity report in accordance with Article 20
(2)

the EU Regulation to the competent authority in respect

the previous year. Objectives

general interest 7. For the purposes

the EU Regulation and these Regulations, each

the following shall be regarded as an objective

general interest: (a) the improvement

health, whether

the population as a whole or

any part

the population; (b) the promotion

environmental sustainability, combating or adapting to climate change or conserving or enhancing the natural environment; (c) the improvement

transport or mobility

people and goods; (d) the development

ficial statistics (within the meaning

the Statistics Act 1993 (No. 21

1993)); (e) the improvement

public services; (f) the advancement

the arts, culture, heritage or science, including scientific research; (g) the advancement

community development and welfare, including education, social cohesion and support

those with needs associated with youth, older age, migration status, ill-health or disability; (h) any other objective that is

benefit to the community, society or the natural or physical environment. Construction

references 8. Sections 10

(1), 24, 35 and 36

the Act

2014 shall apply for the purposes

these Regulations subject to the modification that references in those sections to the relevant statutory provisions shall be construed as a reference to these Regulations and to the EU Regulation in so far as the EU Regulation relates to a data intermediation services provider or a recognised data altruism organisation. Information notice 9.

(1)An authorised

ficer may give an information notice to a data intermediation services provider or to a recognised data altruism organisation which may require the person to give to the authorised

ficer, within such period and in such form as may be specified in the notice, any information specified in the notice that the authorised

ficer may reasonably require for the purposes

verifying compliance with the requirements

Chapter III

, IV or VII

the EU Regulation or these Regulations.

(2)An information notice shall – (
  1. a)state the reason for the notice, (
  2. b)inform the person

the right to appeal the notice under Regulation 12, (c) state that if the person to whom it is given fails to comply with the notice, that person commits an

fence, and (d) be signed and dated by the authorised

ficer.

(3)A person to whom an information notice is given may appeal the notice under Regulation 12.
(4)The authorised

ficer may – (

  1. a)withdraw or amend an information notice at any time, or (
  2. b)where no appeal is made or pending under Regulation 12, extend the period specified under paragraph

(1).
(5)Where an appeal under Regulation 12 is made, and the information notice is not cancelled, the notice as confirmed or varied shall take effect on the later

– (

  1. a)the day next following the day on which the notice is confirmed or varied on appeal or the appeal is withdrawn, or (
  2. b)the day specified in the notice.

(6)Where there is no appeal under Regulation 12, the information notice shall take effect on the later

– (a) the expiration

the period for making an appeal, or (b) the day specified in the notice. Contravention notice 10.

(1)An authorised

ficer who is

the opinion that a person is contravening or has contravened any provision

these Regulations or Chapter III, IV or VII

the EU Regulation may give a contravention notice to the person.

(2)Subject to paragraph
(10), an authorised

ficer shall, before giving the contravention notice, give notice

the proposal to the person and that notice shall contain a statement in summary form

the opinion

the authorised

ficer and a statement that the person may, within 30 days

receipt

the notice, make representations in writing to the authorised

ficer in relation to the proposal, and any such representations within that period shall be considered by the authorised

ficer in deciding whether to give the contravention notice.

(3)A contravention notice shall – (a) state the reason for the opinion referred to in paragraph
(1), (b) identify the provision

the EU Regulation or these Regulations in respect

which the opinion is held, (c) direct the person to remedy the contravention by a date specified in the notice that shall not be earlier than the expiration

the period for making an appeal under Regulation 12, (d) inform the person

the requirement to confirm compliance with the contravention notice in accordance with paragraph

(6), (e) inform the person

the right to appeal the contravention notice under Regulation 12, (

  1. f)include any other requirement that the competent authority considers appropriate in order to remedy the contravention, (
  2. g)be signed and dated by the authorised

ficer, (h) state that if the person to whom it is given fails to comply with the contravention notice, that person commits an

fence, and (i) state, where the person to whom it is given is a recognised data altruism organisation, that if he or she fails to comply with the contravention notice, the competent authority may take the action specified in Regulation 11

(1).
(4)A contravention notice may, in the case that it is given to a data intermediation services provider, include a direction to – (a) postpone the commencement

the provision

the data intermediation service, (b) suspend the provision

the data intermediation service, or (c) cease the provision

the data intermediation service in the case

a serious contravention or where the provider has failed to comply with an earlier contravention notice.

(5)A person to whom a contravention notice is given shall comply with the notice.
(6)A person to whom a contravention notice is given who is

the opinion that the contravention notice has been complied with shall confirm such compliance in writing to the authorised

ficer concerned.

(7)Where a person to whom a contravention notice is given confirms compliance in accordance with paragraph
(6), the authorised

ficer, on being satisfied that the person has complied with the notice, shall within one month

receipt

such confirmation, give notice to the person

compliance with the contravention notice.

(8)A person to whom a contravention notice is given may appeal the notice under Regulation 12.
(9)An authorised

ficer may – (

  1. a)withdraw or amend a contravention notice at any time, or (
  2. b)where no appeal is made or pending under Regulation 12, extend the period specified under paragraph

(3)(c).
(10)Where in the opinion

the authorised

ficer immediate action is necessary because

the gravity

the contravention with the requirements

the EU Regulation or these Regulations, the authorised

ficer may, notwithstanding paragraph

(2), proceed to give the contravention notice to the person concerned.
(11)Where an appeal under Regulation 12 is made, and the contravention notice is not cancelled, the notice as confirmed or varied shall take effect on the later

– (

  1. a)the day next following the day on which the notice is confirmed or varied on appeal or the appeal is withdrawn, or (
  2. b)the day specified in the notice.

(12)Where there is no appeal under Regulation 12, the contravention notice shall take effect on the later

– (a) the expiration

the period for making an appeal, or (b) the day specified in the notice. Removal from register 11.

(1)Where a recognised data altruism organisation fails to comply with a contravention notice, the competent authority may give notice to the organisation

its decision to – (

  1. a)revoke the organisation’s right to refer to itself as a recognised data altruism organisation in any communication from a date specified in the notice, and (
  2. b)remove the organisation from the register on a date specified in the notice.

(2)The competent authority shall publish a decision made by it pursuant to paragraph
(1)(a) on a website maintained by or on behalf

the competent authority. Appeal 12.

(1)A person who receives – (a) a notice under Regulation 6
(5)(b), (
  1. b)an information notice, or (
  2. c)a contravention notice, may, within 21 days beginning on the day on which the notice is given, appeal against the notice to a judge

the Circuit Court and in determining the appeal the judge may, if he or she is satisfied that it is reasonable to do so, confirm, vary or cancel the notice.

(2)A person who appeals under paragraph
(1)shall, at the same time, give notice to the competent authority

the appeal and the grounds for the appeal and the competent authority shall be entitled to appear, be heard and adduce evidence at the hearing

the appeal.

(3)A decision

the Circuit Court under paragraph

(1)shall be final, save that, by leave

the High Court, an appeal from the decision shall lie to the High Court on a specified question

law. Order

High Court to direct compliance with contravention notice 13.

(1)Where a person fails to comply with a contravention notice, an authorised

ficer may apply to the High Court for an order directing immediate compliance with the notice.

(2)The High Court may, upon an application under this Regulation, if satisfied that the person to whom the contravention notice is given has failed to comply with the notice, grant the order referred to in paragraph
(1). Complaints 14.
(1)A person (in this Regulation the “complainant”) may make a complaint in writing to the competent authority concerning a data intermediation services provider or a recognised data altruism organisation in relation to any matter falling within the scope

the EU Regulation.

(2)The competent authority shall consider a complaint made in accordance with paragraph
(1)and may appoint an authorised

ficer to investigate the complaint.

(3)An authorised

ficer may request a complainant to provide such additional information in relation to the complaint, within the period and in the manner specified in the request.

(4)The competent authority shall by notice in writing inform the complainant – (a)

its decision in respect

the complaint and its actions, if any, taken in relation to the complaint, and (b)

the right to appeal under paragraph

(6).
(5)The competent authority may decide to reject a complaint where it believes on reasonable grounds that – (
  1. a)the complaint is frivolous or vexatious or was not made in good faith, (
  2. b)the subject matter

the complaint is trivial, or (c) the complainant has failed to respond to a request for additional information under paragraph

(3).
(6)The complainant may, within 21 days beginning on the day on which a notice is given under paragraph
(4), appeal against the notice to a judge

the Circuit Court, on notice to the competent authority.

(7)A decision

the Circuit Court under paragraph

(6)shall be final, save that, by leave

the High Court, an appeal from the decision shall lie to the High Court on a specified question

law. Co-operation agreements 15.

(1)The competent authority may enter into a co-operation agreement with a body for the purposes specified in Article 13
(3)or Article 23
(3)

the EU Regulation.

(2)A co-operation agreement shall include provisions enabling each party to furnish to the other party information, including personal data (within the meaning

Regulation (EU) 2016/679

the European Parliament and

the Council

27 April 20162 ), in its possession if the information is required by that other party for the purposes

the performance by it

any

its functions.

(3)If the competent authority enters into an agreement under this Regulation, the competent authority – (a) shall provide a copy

the agreement to the Minister for the Environment, Climate and Communications and the Minister for Enterprise, Trade and Employment, and (b) may publish the agreement on a website maintained by or on behalf

the competent authority, with the consent

all parties to the agreement and subject to such redaction as may be agreed between them.

(4)In this regulation, “body” means each

the following: (

  1. a)the Data Protection Commission; (
  2. b)the National Cyber Security Centre (within the Department

Environment, Climate and Communications); (c) a body designated as competent authority in another Member State for the purposes

the EU Regulation. Service

notices 16.

(1)A notice that is required to be given to a person under these Regulations shall be in writing and addressed to the person concerned by name, and may be so given to the person in one or more than one

the following ways: (

  1. a)by delivering it to the person; (
  2. b)by leaving it at the address at which the person carries on business or ordinarily resides or, in a case in which an address for service has been furnished, at that address; (
  3. c)by sending it by post in a prepaid registered letter to the address at which the person carries on business or ordinarily resides or, in a case in which an address for service has been furnished, to that address; (
  4. d)by electronic means, in a case in which the person has given notice in writing to the person giving the notice concerned

his or her consent to the notice (or notices

a class to which the notice belongs) being given to him or her in that manner.

(2)For the purposes

this Regulation, a company formed and registered under the Companies Act 2014 or an existing company within the meaning

that Act shall be deemed to be ordinarily resident at its registered

fice and every other body corporate and every unincorporated body

persons shall be deemed to be ordinarily resident at its principal

fice or place

business.

fences and penalties 17.

(1)A person who contravenes or fails to comply with any

the following shall be guilty

an

fence: (a) paragraphs

(1),
(3),
(12)or
(13)

Article 11

the EU Regulation; (b) Article 12

the EU Regulation; (c) Article 18

the EU Regulation; (d) paragraphs

(3)or
(7)

Article 19

the EU Regulation; (e) Article 20

(1)

the EU Regulation; (f) any paragraph

Article 21

the EU Regulation; (g) paragraphs

(1),
(3),
(4)or
(5)

Article 31

the EU Regulation in so far as it relates to a data intermediation services provider or a recognised data altruism organisation; (

  1. h)an information notice within the period specified in the notice; (
  2. i)a contravention notice within the period specified in the notice.

(2)Where the Commission has established a rulebook pursuant to Article 22

the EU Regulation by delegated act, a person who contravenes the requirements

that rulebook shall be guilty

an

fence.

(3)A recognised data altruism organisation that fails to comply with Regulation 6
(8)shall be guilty

an

fence.

(4)It shall be an

fence for an organisation that is not a recognised data altruism organisation to refer to itself as such.

(5)A person who provides to an authorised

ficer or to the competent authority information which the person knows or ought reasonably to know to be false or misleading (whether on the person’s own behalf or on behalf

another person) in purported compliance with a requirement imposed by these Regulations, commits an

fence.

(6)A person convicted

an

fence under paragraph

(1),
(2),
(3),
(4)or
(5)is liable – (
  1. a)on summary conviction, to a class A fine, or imprisonment for a term not exceeding 6 months or both, or (
  2. b)on conviction on indictment, to a fine not exceeding €500,000 or imprisonment for a term not exceeding 3 years or both.
(7)If the contravention in respect

which a data intermediation services provider is convicted

an

fence under paragraph

(1)(i) is continued after the conviction, the person shall be guilty

a further

fence on every day on which the contravention continues and for each such

fence the person shall be liable, on summary conviction, to a class E fine.

(8)Summary proceedings for an

fence under this Regulation may be brought and prosecuted by the competent authority.

(9)Notwithstanding section 10
(4)

the Petty Sessions (Ireland) Act 1851 , summary proceedings for an

fence under this Regulation may be brought – (a) within 12 months from the date on which the

fence was committed or alleged to have been committed, or (b) within 6 months from the date on which evidence first comes to the knowledge

the competent authority that is sufficient, in the opinion

the competent authority, to justify the bringing

the proceedings, whichever is the later, but no such proceedings shall be instituted later than 2 years from the date on which the

fence was committed or alleged to have been committed.

(10)For the purposes

paragraph

(9)(b), a document purporting to have been issued by the competent authority certifying the date on which the evidence described in that paragraph first came to the knowledge

the competent authority – (a) is admissible without proof

the signature or

ficial character

the person appearing to have signed the document, and (b) in the absence

evidence to the contrary, is proof

the matters certified in the document.

(11)Where an

fence under these Regulations is committed by a body corporate and is proved to have been so committed with the consent or connivance

or to be attributable to any neglect on the part

any person, being a director, manager, secretary or other

ficer

the body corporate, or a person who was purporting to act in such capacity, that person shall, as well as the body corporate, be guilty

an

fence and shall be liable to be proceeded against and punished as if he or she were guilty

the first mentioned

fence.

(12)Where the affairs

a body corporate are managed by its members, paragraph

(11)applies in relation to the acts and defaults

a member in connection with his or her functions

management as if he or she were a director or manager

the body corporate.

(13)Where an

fence is committed under these Regulations and there is a legal representative in the State, proceedings may be brought in the area in which the legal representative ordinarily resides or carries on any profession, business or occupation. GIVEN under the

ficial Seal

the Minister for the Environment, Climate and Communications, 19 December, 2024. EAMON RYAN, Minister for the Environment, Climate and Communications. EXPLANATORY NOTE (This note is not part

the Instrument and does not purport to be a legal interpretation.) These Regulations give effect to provisions in Regulation (EU) 2022/868

the European Parliament and

the Council

30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act). In particular, they establish a framework for the registration and oversight

data intermediation services providers described in Article 10 and data altruism organisations described in Article 18

the EU Regulation. 1 OJ No. L 152, 3.6.2022, p.

  1. 1 OJ No. L 152, 3.6.2022, p.
  2. 2 OJ No. L 119, 4.5.2016, p. 1 Privacy Statement Accessibility European Legislation Identifier (PDF) Open Data License Ráiteas Príobháideachais Inrochtaineacht Aitheantóir Eorpach Reachtaíochta (ELI) Ceadúnas Sonraí Oscailte Liosta Fianán © Government

Ireland. Oireachtas Copyright Material is reproduced with the permission

the Houses

the Oireachtas © Rialtas na hÉireann. Atáirgtear ábhar faoi Chóipcheart le cead ó Thithe an Oireachtais

🔗 To official source

AI explanation based on the official legal text. Indicative, not a substitute for legal advice.