Article 28 Data Act: Contractual transparency obligations on international access and transfer

Providers of data processing services shall make the following information available on their websites, and keep that information up to date:

the jurisdiction to which the ICT infrastructure deployed for data processing of their individual services is subject;

a general description of the technical, organisational and contractual measures adopted by the provider of data processing services in order to prevent international governmental access to or transfer of non-personal data held in the Union where such access or transfer would create a conflict with Union law or the national law of the relevant Member State.

The websites referred to in paragraph 1 shall be listed in contracts for all data processing services offered by providers of data processing services.