Online tool for data protection concepts
We support researchers in submitting their application under Art. 40(4) DSA.
As part of the application process in the  Data Access Portal, various supporting documents must be provided. One of these concerns Art. 40(8)(d) DSA: researchers must demonstrate that they comply with the requirements for data security, confidentiality, and the protection of personal data, and must describe appropriate technical and organizational measures.
To assist with this, we have developed a web tool that guides researchers through the process. Step by step, they are led through a form, and at the end they receive the required declaration and attachments by email. These documents can then be uploaded to the corresponding section of the Data Access Portal.
Get started here: Proof of compliance in accordance with Art. 40 (8) (d) DSA
Attachments (also linked within the tool):
- 
      
Risk assessment (only required in case of high risk)
 - 
      
Technical and organisational measures (TOM), long version (for research involving personal data)
 - 
      
Technical and organisational measures (TOM), short version (for research based exclusively on anonymous data)