Data altruism is the voluntary sharing of data by individuals or companies, without seeking a reward beyond compensation for costs, for objectives of general interest such as health care, scientific research, climate action, mobility or better public services. In data regulation, the concept is defined and organized by the EU Data Governance Act (Regulation (EU) 2022/868), which has applied since 24 September 2023.
The idea responds to a practical problem: many people and firms are willing to donate data for good causes, yet they hesitate because they do not know who will receive it and how it will be used. The Data Governance Act therefore creates a trust framework around donation, with registered organizations, a common label, transparency duties and a standard consent form, while leaving the underlying rules on personal data protection fully in force.
How data altruism works under the Data Governance Act
Data altruism works through a donor, an intermediary organization and a data user. A data subject gives consent, or a company as data holder gives permission, for its data to be used for named general-interest purposes. A registered organization collects the data, manages permissions and makes the data available to researchers, public bodies or other users whose projects match those purposes.
The regulation does not create a new legal basis for processing personal data. When the donated data relate to identifiable people, the GDPR still governs the processing, so the organization must rely on valid consent, respect purpose limitation and honor the right to withdraw consent at any time. For non-personal data, such as industrial sensor readings, the permission of the data holder defines what may be done.
Member States may also adopt national data altruism policies, for example to make donation easier for specific purposes or to clarify how consent is collected. These policies operate alongside the common rules and cannot lower the protection the regulation guarantees.
Requirements for recognized data altruism organizations
An entity that wants to present itself as a data altruism organization recognized in the Union must register with the competent national authority. Registration is voluntary, since anyone may still run a donation project, but only registered entities may use the protected label and the common EU logo, which is meant to signal trustworthiness to donors.
The registration conditions are designed to keep commercial interests away from donated data. The table lists the core requirements and the reason for each.
| Requirement | What it means in practice | Why it exists |
|---|---|---|
| Legal person | A registered entity, not an informal group | Clear accountability |
| General-interest objectives | Activities pursue objectives of general interest | Keeps donation altruistic |
| Not-for-profit operation | No profit motive in the altruism activity | Removes incentives to monetize donors |
| Independence | Legally independent from any for-profit entity | Prevents capture by commercial owners |
| Functional separation | Altruism activities kept apart from other activities | Stops data leaking into other business |
| Rulebook compliance | Meets common information, technical and security rules | Gives a uniform level of protection |
Once registered, the organization appears in a national public register and in a Union register maintained by the European Commission. The registration is valid across all Member States, so a single entity can collect donations throughout the EU.
Transparency, consent and safeguards
Recognized organizations carry ongoing transparency duties that go beyond registration. They must keep full and accurate records of every natural or legal person given the opportunity to process the data, the dates or duration of processing, the stated purposes and any fees paid by users. They must also submit an annual activity report to the competent authority.
The following table summarizes the main safeguards that protect donors after the data have been given.
| Safeguard | Content | Benefit to the donor |
|---|---|---|
| Purpose information | Clear explanation of the general-interest objectives | Informed decision to donate |
| Third-country notice | Information when processing occurs outside the EU | Awareness of international transfers |
| Security measures | Appropriate technical and organizational protection | Lower risk of breach or misuse |
| Easy withdrawal | Simple tools to give and withdraw consent or permission | Continuing control over the data |
| Use restrictions | No use beyond the declared purposes | Protection against function creep |
To make donation comparable across countries, the regulation provides for a European data altruism consent form, developed by the Commission with advice from the European Data Innovation Board. The form is modular, so it can be adapted to specific sectors, and it must be available in a format that can be printed and read easily as well as in electronic form.
Data altruism compared with neighboring concepts
Data altruism sits beside other sharing models in the Data Governance Act and related EU law, and it is easy to confuse them. The key difference is that no reward and no commercial intermediation is involved: the donor gives data for the common good, not for payment or market access.
| Concept | Who shares and why | Main rule set |
|---|---|---|
| Data altruism | Individuals or firms donate data for general-interest goals | Data Governance Act, Chapter IV |
| Data intermediation service | Neutral intermediaries connect holders and users commercially | Data Governance Act, Chapter III |
| Re-use of protected public data | Public bodies allow conditional re-use of protected data | Data Governance Act, Chapter II |
| Open data | Public bodies publish data freely for any re-use | Open Data Directive |
| Data access rights | Users of connected products obtain data they generate | Data Act |
| Secondary use of health data | Health data made available via access bodies | European Health Data Space |
In practice these models interact. A data altruism organization may feed donated data into one of the common European data spaces, and health-related donation now coexists with the European Health Data Space, which creates a separate, permit-based route for the secondary use of health data that does not depend on donor consent.
Practical use, limits and open questions
Data altruism is most useful where many small contributions create value that no single donor could produce: wearable data for cardiology research, smartphone mobility traces for urban planning, or farm sensor data for climate modeling. Patient associations, universities, research foundations and civic technology projects are typical candidates for registration.
The framework also has clear limitations. Registration adds administrative work, so smaller projects often operate without the label. Adoption has been modest since 2023, and the number of registered organizations remains small compared with the ambitions stated when the regulation was adopted. Data quality is another issue: donated data are self-selected, which can introduce bias into research results.
- Consent fatigue can undermine meaningful choice when donors face long forms.
- Re-identification risk remains for rich personal datasets, even after pseudonymization.
- Cost compensation must stay limited to actual costs, or the activity stops being altruistic.
- Regulatory change is possible, because the Digital Omnibus proposals suggest consolidating Data Governance Act rules into the Data Act.
Organizations planning a donation program should therefore decide early whether the label is worth the compliance effort, map their GDPR legal basis, and design withdrawal mechanisms before collecting the first record.
In simple terms
Data altruism means giving your data away for a good cause, much like donating blood. You might allow a research team to use the step counts from your fitness tracker so that doctors can study heart disease, and you receive nothing in return except the knowledge that the data helps others.
The EU rules make sure the organization collecting these donations is trustworthy. It must be non-profit, independent from companies, open about who uses the data and quick to stop using your data if you change your mind. A common label and logo show that an organization has met these conditions.
A practical example
A university hospital consortium in a Member State wants to study sleep quality in people with chronic pain. It sets up a foundation, legally separate from the hospitals and from any company, and registers it as a recognized data altruism organization. Volunteers install an app, read the purposes on a form based on the European template, and give GDPR-compliant consent to share sleep and activity data for three years.
Over eighteen months, about twelve thousand volunteers donate data. The foundation grants access to four research teams, logs every access with its dates and purpose, and charges the teams only the cost of secure hosting. When a few hundred participants withdraw, their records are removed from future extracts within days. The result is a large, well-documented dataset that researchers trust and that donors can still control.