Guillermo Cervera

In recent years, data has become one of the most valuable assets for businesses and public administrations. It is no longer simply a matter of storing information or handling large volumes of records: today, the real challenge lies in how to share, combine and make use of data without losing control over it. And this is where an idea that is becoming increasingly important in Europe comes into play: data spaces. Their importance is not driven by technology alone. It also reflects a shift in how the digital economy is understood. The digital economy encompasses all economic activities that use digital technologies to create value, from Cloud services and digital platforms to Artificial Intelligence, e-commerce and the Internet of Things. Within this economy, data plays an increasingly important role. It is what makes it possible to understand what is happening more clearly, automate processes, personalise services and make informed decisions. That is why the value of data does not lie solely in owning it, but in the ability to use it and, increasingly, to combine it with information from other sources. A company can improve its operations using its own data, but the opportunities multiply when it can collaborate with suppliers, customers, public administrations and other organisations. Data is becoming a strategic resource and an asset capable of generating economic value. And the more valuable data becomes, the more important it is to be able to share it securely, under controlled conditions and in an interoperable way. If data is becoming increasingly valuable, so too is the ability to decide who can use it, for what purpose, for how long and under what conditions. This is why regulation has become an essential part of this new model in Europe. What is a data space? A data space is a federated ecosystem in which different organisations can share and reuse data securely, under controlled conditions and in an interoperable way, without the need to centralise all the information in a single repository. Each participant retains sovereignty over its data and decides who it shares it with, for what purpose, for how long and under what conditions. In other words, a data space is not a large shared database into which everything is uploaded, but an environment in which each participant retains control over its data and can make it available to other participants under a common set of rules. This is precisely what makes data spaces so compelling: they make it possible to generate value from shared data without giving up critical principles such as sovereignty, trust and security. The key lies in three principles: Data sovereignty. The data owner remains in control at all times and decides what to share, with whom, for what purpose and for how long. Technical interoperability. Systems can communicate with one another thanks to common technical standards. Trust. This is not about placing blind trust in every participant, but about relying on a common framework of rules, protocols and safeguards designed to ensure that data exchange takes place in a predictable and verifiable way. ■ Initiatives such as the International Data Spaces Association (IDSA) and Gaia-X have worked to define principles, architectures and trust frameworks that help organisations build interoperable and sovereign data ecosystems. A data space makes it possible to share information without each participant losing control over its own data. Why Europe is promoting data spaces Europe's commitment to Data Spaces responds to a strategic priority: digital sovereignty. For years, major global technology platforms have played a key role in the development of the data economy, building ecosystems in which data is essential to capabilities such as Artificial Intelligence, advanced analytics and digital services. At the same time, Europe is seeking to strengthen a model that enables businesses, public administrations and citizens to participate in that economy while retaining greater control over their own data. ■ The aim is to enable European businesses, public administrations and citizens to participate in the digital economy while retaining control over their own data. Data spaces fit precisely within this vision: a distributed model in which data can flow, but under the control of the organisation or individual that generates or holds it. Europe is promoting data spaces to strengthen its digital sovereignty and participate in the data economy on its own terms. European regulation: the rules of the data economy The European Union recognises that turning data into a genuine economic driver requires more than technology; it also requires a clear legal framework that provides security, trust and predictability for all stakeholders. This is why, within the European Data Strategy, several regulatory initiatives have been developed with a common objective: to create a secure, competitive and trust-based European data market that makes it possible to harness the opportunities created by the growing production and use of data to drive innovation, economic growth and competitiveness in Europe. European regulation provides the trust framework needed for data to be shared, reused and used to generate value with the appropriate safeguards. Among the most important regulations are the Data Act, the Data Governance Act and the GDPR. Data Act: who can use generated data The Data Act introduces an important change: it sets out rules on who can access and use certain data generated by connected products and related services. Its aim is to make it easier for users and authorised third parties to access that data under defined and fair conditions, establishing clear and equitable rules governing access to and use of data, particularly in the context of connected devices. Today, more and more products and services generate data continuously: A connected vehicle can record information about how it operates and where it travels. An industrial machine can provide data about its performance. An IoT device can monitor virtually any aspect of its environment. As these products become smarter and more connected, the volume and value of the information they generate also increases. The question, therefore, is inevitable: who should be able to access and use that data? The Data Act seeks to prevent access to and use of data generated by a connected product from being restricted exclusively to the manufacturer or service provider. In this way, it aims to make it easier for users and, in certain cases, other authorised third parties to use that information to develop new services and applications. This opens the door to new opportunities such as: new data-driven services; predictive maintenance; greater personalisation; more competition between providers; greater choice between manufacturers, providers and platforms; greater data reuse across the value chain. ■ In other words, the Data Act does more than regulate access to data; it can also help unlock economic value by making it easier to reuse data in new use cases and business models. Data Governance Act (DGA): how data is shared The Data Governance Act focuses on data sharing between organisations and on creating mechanisms that foster trust. Its aim is to facilitate the availability and sharing of data within the European Union, by creating trusted mechanisms and common rules that enable certain data to be reused —including data held by the public sector— while respecting the protection of the information and the rights of third parties. Its most significant contributions include: The reuse of certain categories of public-sector data that are subject to third-party rights or restrictions. Data intermediation services, which facilitate exchange between those who hold data and those who wish to use it. The voluntary sharing of data for altruistic purposes, for example for scientific research or purposes in the public interest. The coordination and governance of European data policy. ■ In practice, the Data Governance Act seeks to create a trusted environment that facilitates collaboration and data reuse between organisations, helping to build a more open and secure European data economy. The role of the General Data Protection Regulation (GDPR) The Data Act, the Data Governance Act (DGA) and the General Data Protection Regulation (GDPR) form part of a complementary regulatory framework designed to promote a European data economy based on innovation, trust and the protection of rights. Although the GDPR focuses specifically on the processing of personal data, its role within this ecosystem is essential. Both Data Spaces and exchanges involving data generated through the use of connected products or related services, where this type of information is processed, must ensure that data sharing and reuse are carried out in accordance with principles such as: Lawfulness, fairness and transparency. Data must be processed lawfully, fairly, transparently and in a way that people can understand. Purpose limitation. Data may only be used for specified, explicit and legitimate purposes. Data minimisation. Only data that is adequate, relevant and strictly necessary for the intended purpose should be processed. Security and confidentiality. Measures must be implemented to protect information against unauthorised access, loss or misuse. Respect for individuals' rights. Data subjects must be able to exercise rights such as access, rectification, erasure and data portability. ■ The GDPR regulates how personal data is shared and reused in accordance with principles and obligations designed to protect individuals' fundamental rights and freedoms. The data economy: the context that changes everything This entire regulatory framework reflects a broader reality: the data economy. The data economy is an economic model in which data has become a strategic resource and an asset capable of generating value. Its importance does not lie solely in collecting large volumes of information, but in the ability to analyse, combine, share and reuse it to optimise processes, develop new products and services, and improve decision-making. In this context, data is no longer simply a by-product of digital activity and instead takes on a central role in innovation, organisational transformation and the creation of new economic opportunities. But making the most of its potential requires more than simply having access to data. It must also be possible to exchange it securely and interoperably, under conditions that ensure trust and control for those who generate or hold it. ■ This is precisely where data spaces become relevant: they make it possible to facilitate collaboration and generate value from information exchange without requiring organisations to give up sovereignty over their data. The value of data no longer lies only in collecting it, but in analysing, combining and reusing it to create new opportunities. From the Single Market for Data to the Common European Data Spaces The European Data Strategy pursues an ambitious objective: to create a Single Market for Data that facilitates access to, sharing and reuse of data across countries, sectors and organisations, within a common framework that ensures security, trust and respect for fundamental rights. The aim is to reduce the barriers that hinder access to, sharing and reuse of data within the European Union, in order to drive innovation, facilitate collaboration between organisations and strengthen European competitiveness. Ultimately, the objective is to harness the economic and social potential of data without giving up principles such as privacy, security and sovereignty. But a strategy needs concrete mechanisms if it is to become a reality. This is where the Common European Data Spaces come into play. The European Union is promoting the creation of data spaces in strategic areas such as: healthcare and clinical research, industry and manufacturing, mobility, energy, agriculture, finance, tourism, public administration, skills and employment, the environment. Each of these spaces brings together businesses, public administrations and other stakeholders from the same sector to facilitate data sharing and reuse in an interoperable way and within a shared trust framework. —In mobility, for example, a data space can facilitate the exchange of information between vehicle manufacturers, transport operators, public administrations and service providers. In the energy sector, it can make it possible to combine data from electricity grids, consumers, IoT devices and renewable energy producers to improve efficiency, optimise grid management and develop new services. The idea is not to create a huge centralised database in Brussels where all European information is stored. On the contrary, the model is based on federated ecosystems in which each participant retains control over its data and decides under what conditions it is shared with other members of the ecosystem. Common European Data Spaces turn Europe's strategy into sector-specific ecosystems where data can be shared securely and interoperably. Conclusion Data spaces are not merely a technology initiative. They represent a shift in how Europe understands the value, control and sharing of data. But this model does not exist in isolation. It forms part of a broader European strategy that combines a shared vision, a regulatory framework and concrete mechanisms to facilitate data sharing between organisations. Within this ecosystem, each element plays a complementary role: The European Data Strategy defines the vision: to build a more competitive, innovative and trust-based data economy in which data can generate value without compromising privacy, security or sovereignty. European regulation sets the rules: it creates a common framework for determining how data is protected, accessed, used and shared, providing legal certainty and trust for businesses, public administrations and citizens, based on a system of proactive risk management in key areas such as privacy, security and interoperability. The Common European Data Spaces put that vision into practice: they create sector-specific ecosystems in which different organisations can exchange and reuse data securely, interoperably and under previously agreed conditions. The objective is not to accumulate more data or concentrate it on a single platform, but to enable it to flow and generate value without organisations losing control over it. In a context in which data is essential to innovation, competitiveness and Artificial Intelligence, Europe is backing a model based on collaboration, trust, interoperability and sovereignty. The success of this model will depend on its ability to translate these principles into real use cases and generate value for businesses, public administrations and citizens. If it succeeds, data spaces could become one of the key building blocks of a more competitive, open and resilient European digital economy. ______ AI & Data Decoding Data Spaces (part I): A guide for companies September 9, 2024