The EU Data Act (Regulation (EU) 2023/2854) applies from today.
Key provisions
- Users of connected products and related services have rights to access and share the data they generate.
- Cloud and data processing switching: providers must remove obstacles to switching, and switching and egress charges will be phased out by January 2027.
- Safeguards against unlawful third-country government access to non-personal data held in the EU (Article 32).
- Rules on unfair contractual terms in data sharing agreements.
For cloud customers, the Act should make exit planning easier. For providers, it brings new contractual, technical and transparency obligations. Review your cloud exit strategies and supplier contracts in light of the new rights.
Source: Regulation (EU) 2023/2854 – Data Act (EUR-Lex)
This update is general information, not legal advice. If you would like help assessing the impact on your information security or privacy programme, contact us.
