The European Union is making a move toward greater data transparency and innovation with EU Data Act, set to be applicable from 12 September 2025, with certain provisions to be applicable at later stages. This regulation governs both personal and non-personal data. Key requirements include: 

  1. Improved data sharing
  2. Data access by default and by design
  3. User transparency.

Importantly, the Data Act is without prejudice to GDPR- when personal data is involved (e.g., from connected products or related services), both regulations must be adhered to. The Data Act has extraterritorial application, meaning it applies to non-EU entities offering connected products or services in the EU market. Is your business ready for the changes ahead?