On 12 September 2025, the EU Data Act came into effect, ushering in major changes to how data is accessed, shared, and used across the European Union (EU). Ahead of this milestone, we hosted a one-hour webinar on 4 September 2025, where our experts outlined the regulation’s key concepts, its links with other EU data laws, and the practical steps organizations should take now.

The Data Act in context

The Data Act is an ambitious piece of legislation designed to unlock the value of data generated by the Internet of Things (IoT). It regulates how such data can be accessed, shared, and reused. For businesses, it represents both a compliance challenge and a strategic opportunity.

Rather than viewing it solely as a regulatory burden, companies should see the Data Act as a framework to:

• Build trust with customers and partners;
• Enable new services and innovation; and
• Strengthen relationships across the value chain.

Key points to retain

1. Data sharing (IoT data rights and obligations)

• Users of connected products and related services gain stronger rights to access and share data generated by those products and services.
• Providers of such products and services must ensure transparent information and offer fair contractual terms regarding IoT data access and sharing.

2. Switching cloud services

• Customers of cloud services must be able to switch providers easily, without facing technical, contractual, or commercial lock-in.
• Cloud providers are required to remove obstacles, update contracts, and adapt infrastructure to guarantee portability and interoperability.

Compliance – What businesses should do today

The Data Act’s obligations (with limited exceptions) became applicable on 12 September 2025. Organizations that have not yet acted should urgently:

• Assess the impact of the Data Act on their operations;
• Review and update contracts to reflect new obligations; and
• Implement operational measures to ensure compliance with data access, sharing, and portability requirements.

In summary

Achieving compliance will take time and resources. The critical steps are to update contractual frameworks and put the right operational measures in place. Beyond compliance, the Data Act offers an opportunity for organizations to create value from data, foster trust, and position themselves competitively in the evolving European data economy.

Download presentation