EU Data Act

Written By

francine cunningham Module
Francine Cunningham

Regulatory and Public Affairs Director
Belgium Ireland

As Regulatory & Public Affairs Director in Brussels, I assist companies facing an unprecedented wave of new EU regulation that will have an impact on every business operating in the digital and data-related economy. I help companies navigate complex EU decision-making processes and understand the practical application of the law to their sectors.

Data has become the most sought-after commodity in the digital economy − driving innovation, informing decision making and shaping the future of a wide range of industry sectors. The EU Data Act is designed to create a Single Market for industrial data in the European Union by setting common basic rules on who can use and access data from connected (Internet of Things) devices across all economic sectors. This incoming Regulation is also meant to facilitate switching between data processing services and promote interoperability.

While the new legislation aims to foster greater transparency and open digital markets to new players, there has been concern about the level of protection it offers for intellectual property and trade secrets.

Key rights & obligations

The Data Act sets the ground rules for business-to-consumer, business-to-business and business-to-government exchange of data in the EU Single Market.

Specific measures include the following:

  • Business to Business data sharing obligations for connected products
  • Obligations for Data Holders to make data available to consumers
  • Prohibited Unfair Contractual Terms related to data access
  • Rules for making data available to Public Sector Bodies
  • Switching between Data Processing Services
  • Safeguards against unlawful international governmental access
  • Facilitating Data Spaces and interoperability
  • Limits to Intellectual property rights for certain data in databases

Regarding enforcement, Member State authorities will be empowered to impose “effective, proportionate and dissuasive” financial penalties for compliance failures.

The Data Act is expected to be formally adopted by the European Parliament and Council in November/December 2023. After a lead-in period of 20 months, most of the rights and obligations in the Data Act are expected to apply in the third or fourth quarter of 2025.

To find out more about the Data Act and how our experts can help you to conduct a scoping exercise, revise terms of use or determine how third-party data could be used to improve your own services, click here.

Latest insights

More Insights
Curiosity line teal background

Talent Wars: The Impact of Artificial Intelligence on Human Resource Practices Across Asia

Dec 27 2024

Read More
Curiosity line green background

China Cybersecurity and Data Protection: Monthly Update - December 2024 Issue

17 minutes Dec 23 2024

Read More
featured image

EDPB weighs in on key questions on personal data in AI models

1 minute Dec 20 2024

Read More