Challenges of GDPR Compliance with the Data Altruism Concept Under the Data Governance Act: Lessons from the Estonian X-Road Model

Abstract

The introduction of the Data Governance Act (DGA), which entered into force on 23 June 2022, has marked a significant development in the European data landscape.¹ This landmark legislation aims to reshape data governance practices within the European Union, setting the stage for a new era of data utilization and regulation². However, it presents a complex challenge – how shall these goals be aligned with the strict data protection standards outlined in the General Data Protection Regulation (GDPR)? This research is driven by the recognition that understanding and addressing the compliance challenges that arise when balancing data altruism, data sharing, and data protection in the European data landscape are more crucial than ever. By increasing data availability, the European market seeks to gain a competitive advantage, stimulate innovation, and foster economic growth³. This article addresses the question of how GDPR-compliant approaches can be established to facilitate efficient, secure, practicable, and simple data exchange under the DGA, especially in the context of data altruism, and drawing from the experiences of the Estonian X-Road.