Article 5(3) Data Governance Act

"Public sector bodies shall, in accordance with Union and national law, ensure that the protected nature of data is preserved. They may provide for the following requirements:

(a) to grant access for the re-use of data only where the public sector body or the competent body, following the request for re-use, has ensured that data has been:

(i) anonymised, in the case of personal data; and

(ii) modified, aggregated or treated by any other method of disclosure control, in the case of commercially confidential information, including trade secrets or content protected by intellectual property rights;

(b) to access and re-use the data remotely within a secure processing environment that is provided or controlled by the public sector body;

(c) to access and re-use the data within the physical premises in which the secure processing environment is located in accordance with high security standards, provided that remote access cannot be allowed without jeopardising the rights and interests of third parties."