Governance and Legal
Welcome! If you are involved in governance or legal aspects of establishing a Federated EGA node, you are in the right place. The information here covers topics related - but not limited - to Federated EGA node governance, strategic planning, sustainability, and legal.
You might find this page useful if you are:
- a team or node lead
- a grant writer
- a project manager or coordinator
- a lawyer or legal expert
- a data protection officer (DPO)
By exploring these materials, you will be able to:
- Understand the aims of the Federated EGA
- Understand the role of Committees and Working Groups within the Federated EGA
- Evaluate the roles and responsibilities of your node within the Federated EGA
- Make use of examples and templates to define your node’s governance and legal policies
1. Understand governance structure
Vision
Federated EGA is a global network of repositories enabling secure discovery and access to sensitive human data. Our vision is to accelerate scientific discovery and healthcare breakthroughs by creating the go-to worldwide sensitive human data resource.
In the era of rapidly expanding human genomics in research and healthcare, efficient data reuse is essential to maximise benefits for society. Since 2008, the EGA has served as a resource for permanent archiving and sharing of individual-level genetic, phenotypic, and clinical data generated for biomedical research projects or in the context of research-focused healthcare systems. The increasing scale of data and the evolution of national legislations posed significant challenges to this centralised data access model. In response, the Federated EGA officially launched in 2022, and by the end of 2025 was composed of nine national nodes worldwide and growing.
Use cases
Understand more about the current use cases and architecture for Federated EGA. Here you can read about the requirements and national use cases of early engaged Federated EGA Nodes which aim to be addressed by joining the Federated EGA. The report also describes how specific use cases can be supported by Federated EGA, for example by a governance structure made up of permanent committees and ad hoc working groups, the use of global and community standards, and guidelines for how data/metadata can be shared within the network.
Organisation
Here is described the Federated EGA Structure and Organisation (New version is in progress, coming January 2026). Federated EGA is organised into three tiers: Central EGA (maintained by EMBL-EBI and CRG), Federated EGA nodes (maintained at national or regional levels) and Federated EGA Affiliates (maintained at the institute or project level). Read the document linked above to learn more about the roles and responsibilities of each type of node.
Federated EGA is governed by two permanent committees:
- The Federated EGA Strategic Committee (Terms of Reference) provides direction and strategic planning for the Federated EGA. The Committee receives input from the Central EGA Strategic Committee and provides feedback for the EGA strategic roadmap.
- The Federated EGA Operations Committee (Terms of Reference) reviews operational performance and coordinates technical implementation roadmaps of the Federated EGA. The Committee receives advice from and provides operational reporting to the Federated EGA Strategic Committee.
Additional Federated EGA Working Groups are established, as needed. Working groups can be initiated from either of the Committee.

2. Implement legal frameworks
FEGA Collaboration Agreement
Inclusion in the Federated EGA is codified by signing of the Federated EGA Collaboration Agreement (CA) between Central EGA (represented by the European Molecular Biology Laboratory and Fundació Centre De Regulació Genòmica) and the Federated EGA node. Nodes are welcome to make a copy of this current version of the CA to start its review with their legal teams and understand the responsibilities of joining FEGA. Nevertheless, this version (the one with a watermark) shall not be signed: the official version needs to be obtained from FEGA prior signing through its official channels.
Data Processing Agreement (DPA)
As Central EGA is a Data Processor under GDPR definitions, all data submitters are required to agree to and sign the EGA Data Processing Agreement. Federated EGA nodes also acting as Data Processors will require a similar agreement outline the roles and responsibilities of Data Processors, Data Controllers, and Data Requestors.
Node Operations Guidelines
The FEGA Node Operations Guidelines document gives an overview of the operational areas which require resources in order to establish and operate a Federated EGA node. The document is based on more than 10 years experience of establishing and operating the EMBL-EBI and CRG Central EGA nodes. It provides a breakdown of the operational areas of responsibility into Helpdesk Services, Technical Operations, Software Development, and IT Infrastructure.
3. Complete steps to join Federated EGA
The pathway to becoming a Federated EGA node includes governance/legal steps (red, top-right path) that must be completed:
- Contact FEGA with intent to join. This step can be accomplished by reaching out directly at fega-info@lists.ega-archive.org or by engaging in the ELIXIR FHD Community (“How do I start?”).
- Present use cases to ELIXIR FHD Community; Complete FEGA Use Case Survey. Nodes are encouraged to present at an ELIXIR FHD Community Call on topics related to: 1) national use cases for managing sensitive human omics, phenotype, and clinical data; 2) current challenges for managing sensitive human data; 3) solutions/initiatives planned or in progress to meet these challenges; and 4) how Federated EGA fits in to the node’s overall goals. Some examples of previous presentations from nodes:
- Perform FEGA Maturity Model self-assessment. This step can be accomplished by evaluating your node against the Maturity Model.
- Sign FEGA Legal Agreement. Also called the “FEGA Collaboration Agreement”, this is the final step to official join the Federated EGA.
4. Explore additional resources
- More about EU GDPR
- Training materials developed by ELIXIR-Luxembourg on data protection in biomedical research
5. What’s next?
Coming soon!