Data Act
Data Act, in plain words.
The EU law on who may use data from connected products, and on letting business customers leave a cloud or software provider freely. Regulation (EU) 2023/2854. Applies since 12 September 2025. Cloud switching charges end on 12 January 2027.
Who it covers
Makers of connected products and related services, the businesses that hold their data, and every provider of cloud and software services to business customers.
What it asks
Data from connected products
Let users of a connected product get the data it generates, and share it with a provider they choose (Articles 3 to 5).
Switching providers
Let a customer switch to another provider or bring the data home: two months' notice at most, a transition of up to 30 days, and the data exported (Articles 23 to 31).
Switching charges
Reduced to cost until 12 January 2027, then abolished (Article 29).
Fair terms
No unfair terms where one business imposes data-sharing terms on another (Article 13).
Try this in a copy of your own, for two hours, with nothing to sign up for.
Open your own copyAlso in the law
Data held outside the EU
Safeguards against unlawful access to non-personal data from outside the EU (Article 32).
Penalties
Set by each country. Where personal data is involved, GDPR's fines apply.
The official text
Regulation (EU) 2023/2854 on EUR-Lex: https://eur-lex.europa.eu/eli/reg/2023/2854/oj
What Eurus keeps
Eurus's law register holds 2 duties from this law, each with what it asks, who it binds, what shows it, and the date it was read against the official text.
Want it on your own systems?
We start with an audit: how your operations really run, mapped to the controls you keep.