In September 2025, the EU Data Act will become applicable. This legislative framework is designed to revolutionize data access and sharing. In this blog post, we will delve into the key aspects of the EU Data Act, its implications for various stakeholders, and the expected changes it will bring about.
Purpose and scope of the EU Data Act
The EU Data Act establishes a legal framework for the free and fair sharing of data. Its primary objectives include promoting data-driven innovation and economic growth by facilitating seamless data sharing, which aims to unlock new opportunities for businesses and consumers alike. The act also ensures data portability and interoperability by improving standards for data portability and promoting interoperable data formats, enabling smoother data exchanges. Additionally, it enhances data governance and compliance by introducing standardized data exchange agreements and promoting voluntary agreements, with mandatory conditions in case of disagreements.
The scope of the EU Data Act is extensive, covering various types of data and stakeholders. It applies to personal and non-personal data, ensuring that data made available to controllers based on consent or contract fulfillment is immediately accessible. The data must be of the same quality as available to the data holder and provided in a comprehensive, structured, commonly used, and machine-readable format. This ensures that data is not only accessible but also usable in a meaningful way.
Key stakeholders and their roles
The EU Data Act impacts a wide range of stakeholders, including consumers, businesses, and governments. For consumers, the act ensures fair, transparent, and non-discriminatory access to data, empowering them with better control over their data. For instance, a consumer with a smart home thermostat can choose an independent repair service, reducing costs and improving convenience. This level of control and choice is expected to lead to lower prices for customer services and repairs, as consumers are no longer locked into using the manufacturer's services.
For businesses, the act promotes a competitive market by establishing rules for fair and non-discriminatory access to data. Small and medium-sized enterprises (SMEs) can access data from connected devices under fair conditions, allowing them to develop innovative products and services. This is particularly beneficial for startups and smaller companies that may not have the resources to generate large amounts of data independently.
Governments, in exceptional cases, can access private data, provided it is proportionate, reasonable, and in line with data protection standards. This access can be crucial during emergencies, such as natural disasters, where real-time data from smart city infrastructure can aid in managing evacuation routes and resource deployment. For example, during a natural disaster like flooding, authorities can access real-time data from smart city infrastructure like bridge and road sensors to better manage evacuation routes and resource deployment.
Compliance and enforcement
The EU Data Act introduces compliance and enforcement mechanisms to ensure adherence to its provisions. National authorities and the EU Commission oversee the implementation of the act, with mechanisms in place to monitor compliance and enforce sanctions for violations.
Compliance with the EU Data Act involves several key activities. Businesses must ensure continuous compliance and transparency in their data management practices. This includes identifying gaps in current data practices, maintaining accountability, and preparing for regulatory audits. Regular updates of security protocols and investment in compatible technologies and systems are essential to protect against unauthorized access and data breaches. Additionally, businesses must conduct ongoing employee training on compliance requirements and promote mediation for efficient resolution of data-sharing disputes.
Challenges and risks
Consumers may worry about their personal data being shared with more platforms, increasing the risk of data breaches. Ensuring consistent enforcement across all EU member states may be challenging, potentially leading to inconsistencies and legal conflicts. Small businesses may struggle with the financial and administrative burdens of adapting to new data access and sharing requirements.
Expected changes and benefits
The EU Data Act is poised to bring about significant changes and benefits. Consumers will have more options for repair services, potentially reducing costs. Businesses can leverage data access to offer innovative services, enhancing their competitiveness.
For example, a factory robot that is out of service today would require contacting the manufacturer for repairs. Under the EU Data Act, the customer could potentially contact a cheaper alternative repair service with access to the data. This increased competition is likely to drive down prices and improve service quality.
New opportunities for data-driven services will emerge as businesses can leverage data access to offer innovative services. For instance, a hotel that owns devices from various manufacturers could receive specific advice from independent service providers that offer data access across all devices. This would enable the hotel to optimize its operations and enhance guest experiences.
Conclusion
The EU Data Act marks a significant step towards a more connected and data-driven European economy. Since September 2025, is not far away, you should ask yourself the following questions:
- Which connected products are in scope?
- What is scope of the relevant data that need to be considered?
- How do I need to update my contracts with clients to use the data of the connected products?
- How can I collect and document user consent?
- How do I ensure the confidentiality of my trade secrets?
- Since there will be increased competition in the aftermarket services, how can I position myself strategically to stay relevant for my clients in this area?
Please contact our experts for more information or if you need support.
