An EU proposal for a data marketplace aims to offer protections for corporate and public-service data, as GDPR only covers individuals
New EU proposal aims to offer protections for corporate and public-service data as GDPR covers individuals — The European Union wants to take control …
Context & Ripple Effects
When Brussels laid out its data-governance framework alongside high-risk AI rules in February 2020, the gap was obvious: GDPR gave individuals rights over their personal data, but corporate and public-service data sat outside any EU protection regime. This marketplace proposal is the fill-in move, extending the union's regulatory perimeter from persons to organizations and public bodies.
It also fits the EU's established playbook of exporting its rules: after GDPR, officials tied data protection to trade deals with Brazil, Japan, and South Korea (per the 2018 coverage), so whatever structure emerges here is positioned to become a global template, not just an internal one.
First-order effects
- Companies holding industrial and public-service data gain, for the first time, an EU-level legal framework governing who may access and trade it — until now their only reference point was GDPR, which by design covers individuals alone.
- Public-sector bodies get a sanctioned channel to license non-personal data through a governed marketplace instead of ad hoc bilateral arrangements.
Second-order effects
- Cloud incumbents are already in Brussels' crosshairs on data access — the later Data Act would force AWS and Azure to make customer switching easier — and a formal marketplace adds regulated intermediaries between them and enterprise data, eroding the platform position that helped cement Big Tech's data-economy dominance.
- Compliance and privacy-tech vendors, whose growth GDPR already fueled, gain a second product line as firms need tooling to prove provenance and permissions for non-personal data.
Third-order effects
- If the pattern holds, the EU is assembling a layered data-rights stack — GDPR for individuals, this marketplace for corporate and public-service data, the Data Act for access rules — with each layer reinforcing the leverage that made GDPR a trade-deal export.
- Small firms face the same compliance-cost dynamic GDPR produced, where relatively high fixed costs favored large incumbents; whether the marketplace lowers or raises that barrier is the open structural question.
The trend: The EU is extending governance from personal data to the full data economy, converting regulatory design into market-access power that travels through trade relationships.