Data Act and connected devices

The user of a connected product has a right to access the data the product generates and to have it shared with a third party of their choosing. That makes it a design obligation on the manufacturer: the data has to be accessible by default, and the contract has to state what is available. Cloud services sold with the product must also permit switching to another provider without obstruction.

• Design the access route into the product: make readily available data accessible to the user, free of charge and in a structured, commonly used format.
• State in the contract what data the product generates, in what format, at what frequency and how it is accessed.
• Honour third-party sharing requests from the user without imposing conditions that make the right theoretical.
• Remove switching obstacles from cloud contracts: no egress charges beyond what the regulation permits and no lock-in periods it prohibits.
• Trade secrets can be protected with agreed measures, but they cannot be used as a blanket refusal of every request.

• Regulation (EU) 2023/2854 on harmonised rules on fair access to dataArticle node

• How does the EU Data Act apply to Indian IoT manufacturers?

• Cyber Resilience Act
• Indian software and SaaS handling EU data
• Data transfers from the EU to India
• All requirements
• Indian law against EU law

Sector

IoT, connected devices, industrial equipment

Read date

2026-08-26

Register version

in-export-v1.0.0

Address

/in/export/data-act