EU Data Act · Chapter VII · Unlawful International Governmental Access and Transfer of Non-Personal Data
Article 32
International governmental access and transfer
Precise reading
Providers must take all reasonable measures (technical, organisational, legal) to prevent international governmental access/transfer of non-personal data held in the EU that would conflict with Union or national law; foreign judgments/decisions are enforceable only via international agreements or narrow conditions, with minimisation and notification duties.
A summary of the operative demand, not the statute.
Plain reading
The sovereignty backstop: your data cannot be quietly reached across borders through your provider.
Paraphrase.
Facts
| Applies from | 12 September 2025 |
|---|---|
| Binds | Data Processing Service Provider |
| Cross-references | Article 28 |
| On the trace | Stop 3, Cloud service, Stop 4, Cloud AI |
| Rights that rest on it | Your data can't be quietly reached across borders. |
The Regulation in the Official Journal · This article in the knowledge base
Not legal advice. This is the author’s own reading of the law, written to help facilities managers ask better questions. It has not been reviewed by a lawyer. For decisions, read the official text and take legal advice.