S.L. 545.34 Art. 20Data management.

(1) When laying down the rules regarding the management and exchange of data, the Regulator shall specify the rules on the access to data of the final customer by eligible parties in accordance with this regulation and the applicable Union legal framework. For the purpose of these regulations, data shall be understood to include metering and consumption data as well as data required for customer switching, demand response and other services.

(2) The Regulator shall organise the management of data in order to ensure efficient and secure data access and exchange, as well as data protection and data security.

Independently of the data management model applied, the parties responsible for data management shall provide access to the data of the final customer to any eligible party, in accordance with sub-regulation (1). Eligible parties shall have the requested data at their disposal in a non-discriminatory manner and simultaneously. Access to data shall be easy and the relevant procedures for obtaining access to data shall be made publicly available.

(3) The rules on access to data and data storage for the purpose of these regulations shall comply with the relevant Union law.

The processing of personal data within the framework of these regulations shall be carried out in accordance with Regulation (EU) 2016/679.

(4) The Regulator shall authorise and certify or, where applicable, supervise the parties responsible for the data management, in order to ensure that they comply with the requirements of these regulations.

Without prejudice to the tasks of the data protection officers under Regulation (EU) 2016/679, parties responsible for data management shall appoint compliance officers who are to be responsible for monitoring the implementation of measures taken by those parties to ensure non-discriminatory access to data and compliance with the requirements of these regulations.

(5) No additional costs shall be charged to final customers for access to their data or for a request to make their data available.

Parties responsible for data management shall be responsible for setting the relevant charges for access to data by eligible parties.

The Regulator shall ensure that any charges imposed by regulated entities that provide data services are reasonable and duly justified.