IDSA Principles: The Rules That Guarantee Trust in Data Spaces

Data Spaces are much more than technology: they are collaborative environments where companies, public administrations, and research centres can share information without losing control over it.

However, for this to be possible, there must be a common foundation that guarantees security, trust, and interoperability among all participants.

That foundation is defined by the model of the International Data Spaces Association (IDSA) — a European initiative that sets out the principles ensuring that data exchange is secure, fair, and transparent.

At the Zamora Smart Data Space, these principles serve as the guiding framework on which the entire ecosystem is built.

1. Data Sovereignty

Data sovereignty lies at the heart of the entire model. It means that the data owner — whether an individual, company, or institution — retains full control over their data, even after it has been shared.

This entails being able to decide:

• which data are shared,
• with whom,
• for what purpose, and
• for how long.

Thanks to this sovereignty, organisations can collaborate confidently, knowing that their information will not be used beyond the agreed terms.
In practice, this makes it possible, for instance, for an energy company to share consumption data with a start-up developing efficiency solutions without transferring ownership of that information.

2. Trust: The Pillar of Every Ecosystem

Trust is the value that enables data exchange to occur safely and transparently. Within the IDSA framework, this trust is built on three levels:

Certification: Every participant and component forming part of a data space must undergo a formal certification process defined by the IDSA scheme. This ensures they comply with the required standards of security, functionality, and reliability to operate within the ecosystem.

Secure Identity: Each organisation, component, or connector has a verifiable digital identity. This guarantees that all interactions occur between authenticated parties, eliminating the risk of unknown or fraudulent actors.

Secure Communication: All transactions and communications are protected by state-of-the-art security protocols, ensuring that data travel encrypted and safeguarded from unauthorised access.

3. Interoperability and Standardisation

For Data Spaces to function as truly open networks, all participants must “speak the same language”. For this reason, the IDSA model relies on open standards and public specifications, avoiding dependence on a single vendor or technology.

This approach allows any organisation — whether an SME, start-up, or public body — to connect and collaborate without technical barriers, using compatible and transparent tools.

4. Transparency and Auditability

Although the shared data remain private and protected, transactions within the space can be recorded in an auditable manner, typically through a Clearing House.
This means it is possible to verify:

• who accessed which data,
• when, and
• under what conditions.

This record does not expose the data themselves but ensures accountability. It strengthens trust and facilitates the resolution of potential disputes, since everything is properly documented.
The system is transparent while remaining secure.

5. Openness and Neutrality

Data Spaces are designed as open and collaborative ecosystems. Any actor — from the public, private, or third sector — can participate as long as they follow the established rules.

Moreover, governance must be neutral and representative, ensuring that no single entity holds greater power or influence than the others. This guarantees fairness, fosters healthy competition, and allows the benefits of data exchange to reach all participants equally.

In, this philosophy translates into a space where SMEs, start-ups, and institutions work together on an equal footing to create value from data.

The IDSA principles are what make Data Spaces operate with trust, security, and fairness. At the Zamora Smart Data Space, they are applied to ensure that every exchange is secure, auditable, and sovereign. In this way, a model is built where data become a shared asset, driving innovation and digital transformation across the entire region.