EU Data Act Now in Force, Handing Consumers and Businesses Greater Control Over Device Data

The EU’s Data Act officially came into effect last week, marking a major shift in how data from connected devices—ranging from cars and smartwatches to smart TVs and industrial machinery—can be accessed and shared.

The legislation is designed to make high-quality data more widely available, giving both consumers and businesses greater power over the information generated by their devices while fuelling new opportunities for innovation across Europe’s digital economy

What the Data Act Delivers

Under the new rules, manufacturers must ensure that connected devices sold in the EU are built to allow data sharing. As a result:

• Consumers can now access their device data and choose more affordable repair or maintenance services, or even carry out repairs themselves.

• Businesses in sectors like agriculture and manufacturing can make better use of performance data from industrial equipment, improving efficiency and productivity.

• Cloud service customers gain new freedoms, including the ability to switch providers more easily or run services across multiple platforms.

• Unfair contractual terms that block or restrict data-sharing are explicitly prohibited.

The Commission has also issued new guidance on vehicle data sharing—expected to improve areas like car maintenance, car-sharing schemes, and mobility-as-a-service platforms.

A Boost for Innovation and Consumer Rights

Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, welcomed the changes:

“The Data Act empowers users, opens markets, and gives businesses the data they need to create innovative services – from smarter vehicle repairs to new energy-efficiency solutions. We are equally committed to helping companies adapt to the new rules, reducing administrative burden and turning data into real opportunities for people and businesses across Europe.”

Support for Implementation

To help businesses adapt, the Commission is preparing a suite of practical tools, including:

• A Data Act Legal Helpdesk to provide companies with direct guidance.

• Clarification on when protections for trade secrets apply under the new framework.

• Standard clauses for cloud contracts and model terms for data-sharing agreements.

A broader Data Union Strategy is also in development to simplify and strengthen the EU’s overall data framework.

Complementing Existing Laws

The new rules build on the Data Governance Act, which focuses on voluntary data-sharing. While that law aimed to build trust, the Data Act provides clear legal rights and obligations around who can access and use device-generated data.

The Commission has worked closely with companies, industry associations, and civil society groups to ensure the law is practical, effective, and proportionate. Engagement with stakeholders will continue to shape future guidance and keep the Act aligned with the needs of both businesses and individuals.