EU Data Act takes effect — new rules for connected device data
As of 12 September 2025 the EU Data Act enters into force. The new regulation sets who can access data generated by connected devices (smartwatches, smart home appliances, industrial machines, etc.) and how that data can be used, with the stated aim of giving users more control and promoting a fairer data economy.
Key points
- Access rights: Users and certain businesses gain clearer rights to access data produced by their devices.
- Data sharing & interoperability: Rules to reduce exclusive control by device makers and cloud providers, encouraging data portability and switching providers.
- Scope: Applies to IoT devices, connected products, and related services across the EU.
- Objectives: Boost competition, innovation, and user control while protecting legitimate interests and security.
What this means for users and businesses
Consumers should see improved access to their device data and more options for choosing services that use that data. Businesses may need to adapt policies and technical systems to enable lawful data access and sharing, and to support easier switching between data-processing providers.
Practical timeline & next steps
The regulation is in force as of 12 September 2025. Organizations should review compliance requirements, update contracts and technical interfaces, and assess data governance practices.
Sources & further reading
What impact do you expect the Data Act to have on your devices, products or services? Share your thoughts below.