
On 12 September 2025, Regulation (EU) 2023/2854 of the European Parliament and of the
Council on harmonised rules on fair access to and use of data (Data Act) will come into
force. The new rules will have a profound impact on the way we work with data in Europe,
bringing about fundamental changes, especially for companies operating in the Internet of
Things (IoT) and other data-intensive industries.
The Data Act determines who can access data and under what conditions, focusing in
particular on the data generated by individual smart devices. For example, this means that
manufacturers of these smart devices and service providers will be obliged to allow access to
data to users who decide on their possible further sharing. The Data Act is complementary to
the GDPR.