Skip to content
NewNeed a law or country we don't cover yet? Tell us, and see what's coming next.What's coming →
GlanceDesk™Jurisdiction

Home › Law library › EU Data Act

EU

EU Data Act

Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act)

Sourced · 13/14 facts confirmed by two sources. Last verified 10 October 2026

Next full re-check due: . Regulator news is checked monthly; changes are logged in the change log.

Cite this page: GlanceDesk Jurisdiction, “EU Data Act (European Union)”, glancedeskjurisdiction.com/laws/eu-data-act, last verified 10 October 2026.

European Union Data sharing

Status
In force since 11 Jan 2024; applies from 12 Sep 2025 (design duty 12 Sep 2026; switching fees end 12 Jan 2027).✓Sources: digital-strategy.ec.europa.eu, eur-lex.europa.eu, springlex.eu, mccannfitzgerald.com
Who it applies to
Makers of connected products and related services sold in the EU, data holders, cloud/data-processing service providers, and businesses using B2B data-sharing contracts, wherever established.✓Sources: digital-strategy.ec.europa.eu, mccannfitzgerald.com, taylorwessing.com
Size thresholds
Micro and small enterprises are exempt from the connected-product data-sharing duties (Chapter II), unless linked to a larger firm or subcontracted to make the product.✓Sources: eur-lex.europa.eu, bipt.be
Regulator
National competent authorities designated by each Member State (DPAs for personal data issues)✓Sources: eur-lex.europa.eu, enterprise.gov.ie, mccannfitzgerald.com
Local representative
Businesses in scope that are not established in the EU but sell connected products or offer services (incl. cloud/data processing) in the EU must designate a legal representative in a Member State.✓Sources: eur-lex.europa.eu, streamlex.eu, taylorwessing.com
Sending data abroad
Cloud providers must take measures to prevent unlawful non-EU government access to non-personal data held in the EU.✓Sources: eur-lex.europa.eu, springlex.eu
Maximum penalty
Set nationally; must be effective, proportionate and dissuasive (e.g. Ireland's draft: up to 4% of EU turnover). GDPR fines apply to personal-data breaches.✓Sources: eur-lex.europa.eu, enterprise.gov.ie, mccannfitzgerald.com

Facts marked “Being verified” are still being confirmed and are not given as answers.

What you must do✓

Recent changes

Applied 12 Sep 2025. Digital Omnibus (proposed Nov 2025, pending) would fold in the Data Governance Act and ease trade-secret, B2G and cloud-switching rules. EU governments have not yet agreed the Council's negotiating position (a vote planned for 26 Jun 2026 was cancelled; further votes planned for 7 and 11 Oct 2026 were also called off, with no new date set and Data Act trade-secret rules the main open issue); EU leaders want a deal by end-2026.✓

Sources

Sources used for the independent check (18)

= confirmed by two independent sources, at least one official. How we verify

Information only, not legal advice. Laws change; confirm with the regulator or a qualified lawyer before relying on this page. Spotted an error? Email contact@glancedeskjurisdiction.com.