Source: OJ L, 2025/2050, 9.10.2025

Artikel 4 Roller och ansvarsområden för behandling av personuppgifter i DSA-dataåtkomstportalen

Summary What does Article 4 of the Data access for vetted researchers say?

This article establishes the data protection roles of the key actors involved in the DSA data access portal.

It draws a clear distinction between Digital Services Coordinators, who act as independent controllers of personal data in managing the data access process, and the Commission, which acts only as a processor of personal data within the portal.

This distinction is significant in the context of EU data protection law, as it determines who bears ultimate responsibility for how personal data is used versus who merely handles it on another party's behalf.

Important points:

Digital Services Coordinators are designated as separate controllers for personal data processed in managing the data access process and publishing relevant information.
The Commission is designated as a processor of personal data within the DSA data access portal, not a controller.
The Commission's specific responsibilities as processor are defined in the Annex to the regulation.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

1. Samordnare för digitala tjänster ska vara enskilda personuppgiftsansvariga med avseende på den behandling av personuppgifter som de utför för att hantera processen för dataåtkomst och för att offentliggöra relevant information.
1. Kommissionen ska vara personuppgiftsbiträde för personuppgifter som behandlas inom DSA-dataåtkomstportalen
1. Kommissionens ansvar som personuppgiftsbiträde för databehandling som utförs i DSA-dataåtkomstportalen ska vara enligt det som anges i bilagan.

Table of contents

Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.