What is the EU Data Act and who does it apply to?

The EU Data Act (Regulation 2023/2854) is a regulation establishing rules for fair access to and use of data generated by connected products and related services. It applies to manufacturers of connected products, providers of related services, data holders, data recipients, and public sector bodies seeking data access.

When does the EU Data Act come into force?

The EU Data Act entered into force on January 11, 2024, and will apply from September 12, 2025. Organizations should begin preparation now to ensure compliance by the application date.

What are the main obligations for Data Holders?

Data Holders must provide users with access to data generated by connected products, share data with third parties designated by users, ensure data is in machine-readable formats, implement security measures, respond to requests promptly, and maintain audit records.

How is the EU Data Act different from GDPR?

While GDPR focuses on personal data protection and privacy rights, the EU Data Act addresses the economic value of data sharing across all types of data (personal and non-personal) generated by connected products and services. They are complementary regulations.

What technical infrastructure do I need for compliance?

Compliance requires secure APIs for data access, consent and authorization management, data format transformation capabilities, audit logging, and third-party recipient management. Fiskil provides all of these as a managed platform.

Can Fiskil help with existing data infrastructure?

Yes. Fiskil integrates with your existing systems and data sources. We provide the compliant access layer without requiring you to rebuild your core infrastructure.

EU Data Act Compliance Is Not a Policy Problem — It's a Systems Problem

The regulation is clear. Implementation is complex. We make it simple.

Full Data Holder compliance infrastructure
Automated consent and access management
Audit-ready logging and reporting

The EU Data Act requires Data Holders to share product data with users and authorized third parties. Without the right infrastructure, compliance becomes a costly, ongoing engineering burden.

Regulatory Context

What the Law Requires

The EU Data Act (Regulation 2023/2854) establishes rules for fair access to data generated by connected products and related services. As a Data Holder, you have specific obligations to enable data access.

Key Obligations

Provide users with access to data generated by their connected products
Share data with third parties designated by users, upon request
Ensure data is provided in a commonly used, machine-readable format
Implement technical measures to prevent unauthorized access
Respond to data access requests within a reasonable timeframe
Maintain records of data sharing activities for audit purposes

Key Dates

September 12, 2025

EU Data Act enters into application

2026-2027

Phased enforcement begins across sectors

Implementation Reality

What This Means in Practice

Meeting compliance requirements demands significant technical capability:

Challenges

Building secure APIs for data access across product lines
Managing user consent and authorization workflows
Ensuring interoperability with third-party data recipients
Creating audit trails that satisfy regulatory scrutiny
Maintaining compliance as regulations evolve
Scaling infrastructure without proportional cost increases

Solution

Purpose-Built Infrastructure for Data Holder Compliance

Consent & Authorization Management

Granular consent capture with time-boxed, scope-based permissions tied to verified identities. Complete audit trail for every access decision.

Interoperable Data APIs

Standards-based APIs that normalize your data into compliant formats. Third parties connect once; you maintain control.

Audit-Ready Logging

Immutable logs of all data sharing activities. Exportable reports for regulators and internal compliance teams.

Third-Party Registry

Vet and approve data recipients with risk scoring, certification tracking, and continuous monitoring.

Trust & Proof

Enterprise-Ready Infrastructure

Security & Compliance

SOC 2 Type II certified infrastructure
End-to-end encryption for data in transit and at rest
Multi-factor authentication for all access points
Regular third-party security audits

Scale & Reliability

Millions of API calls processed monthly
99.99% uptime SLA
Deployed across multiple regulated industries
Built for enterprise-scale data operations

Frequently Asked Questions

Related Resources

Technical Implementation

Manufacturing & Industrial IoT

Automotive & Mobility

Ready to Get Started?

Talk to our team about your EU Data Act compliance needs.

Loading Contact Form...