35. What can a third party do with the data they receive from a user/data holder in the context of Chapter II?

The general principle, according to Article 6(1) of the Data Act, is that a third party can use the data for purposes that were agreed with the user (usually in the context of providing a service to the user). Article 6(2) includes a closed list of actions which are prohibited for the third party. This list includes using data to develop a competing product and sharing the data with a gatekeeper (as defined under the Digital Markets Act).