Overview of the EU Data Act's Goals
The EU Data Act fundamentally changes the ownership and accessibility of machine-generated data. Historically, manufacturers siloed this data. The Act aims to create a competitive data economy by breaking down these silos.
It mandates that users of connected devices have easy, secure, and free access to the data their usage generates, and the ability to port that data to third-party service providers.
Who Does the Data Act Apply To?
The regulation applies to manufacturers of connected products placed on the EU market, and providers of related digital services. This includes everything from smart home appliances and connected vehicles to industrial machinery.
The obligations generally target the 'data holder'—the entity that controls the technical design and data collection mechanisms of the product.
Core User Rights: Access and Portability
Users (both individuals and businesses) have the right to access data generated by their products 'by design and by default'. Where direct access is not technically feasible, the data holder must make it available without undue delay.
Furthermore, users can request that the data holder share this data directly with a third party, enabling them to use independent repair services or alternative analytics platforms.
Requirements for Pre-Contractual Data Notices
Before a user purchases or licenses a connected product, the manufacturer must provide a clear transparency notice. This notice is a legal requirement under the Data Act.
The notice must detail what data is collected, how it is used, whether it will be shared continuously, and exact instructions on how the user can access or port their data.
- Types and volume of data generated
- Whether data is stored on-device or in the cloud
- Step-by-step data access instructions
- Contact details of the data holder
Frequently asked questions
Does the EU Data Act apply to personal data?
Yes, it applies to both personal and non-personal data. When personal data is involved, the Data Act operates in conjunction with the GDPR, ensuring user privacy is maintained.
Can a manufacturer charge a user for data access?
No, data holders must make the generated data available to the user free of charge. However, they may charge a reasonable, cost-based fee when sharing data with a third party at the user's request.
Does the Data Act force companies to reveal trade secrets?
No, the regulation includes safeguards for trade secrets. However, manufacturers cannot use trade secret protection as a blanket excuse to deny data access; specific agreements must be structured to protect the secrets during data sharing.
What happens if a user wants to share data with a tech giant?
The Data Act includes provisions known as 'gatekeeper' restrictions. Users cannot request data to be shared with companies designated as gatekeepers under the Digital Markets Act (DMA), preventing further market monopolization.