EU Data Act
Governs access to and sharing of data generated by connected products, and mandates cloud-switching rights. Sets the terms on which AI developers can lawfully obtain industrial and IoT training data.
Key dates
- Jan 11, 2024Entered into force
- Sep 12, 2025Most obligations become applicable
Risk areas addressed
Who it applies to
Manufacturers of connected products, data holders and cloud service providers making data available in the EU.
Penalties & enforcement
Set by member states; GDPR-level fines apply where personal data is involved.
Enforced by: National competent authorities & the European Data Innovation Board
EU Data Act is enforced by National competent authorities & the European Data Innovation Board. Its obligations are already live, so a gap is a present exposure rather than a future one. In practice that means knowing which of your AI systems fall in scope across every sector you operate in, holding assessments that speak to data governance, transparency and governance & accountability, and being able to produce that evidence on request, including for systems built outside the jurisdiction.