Skip to content
AI Policy Generator

ESWhat applies

European Union · Regulation

Data Act

In forceData Act

Summary

It gives users of connected products access to the data they generate and requires cloud providers, including AI-as-a-service providers, to make switching providers easy.

Who it applies to

Makers of connected products and data processing service providers (cloud, SaaS, AI as a service).

Penalties

Set by each Member State.

Official name
Reglamento (UE) 2023/2854 del Parlamento Europeo y del Consejo, de 13 de diciembre de 2023, sobre normas armonizadas para un acceso justo a los datos y su utilización (Reglamento de Datos)
Official reference
Reglamento (UE) 2023/2854, DO L de 22.12.2023; aplicable desde el 12.9.2025
Regulator
National competent authorities (to be designated in Spain)
Official source
Check the sourceHow we verify sources

Key dates

Obligations and dates

Obligations table
ObligationArticle or citationStatusDateWho it applies toVerification
Let customers switch cloud or AI providersReglamento (UE) 2023/2854, arts. 23-31In forceSeptember 12, 2025If you offer AI or software as a cloud service to EU customers.Verified in the official source on November 4, 2026
Provide access to connected-product dataReglamento (UE) 2023/2854, arts. 3-5In forceSeptember 12, 2025If you make connected devices or related services that generate usage data.Verified in the official source on November 4, 2026

Let customers switch cloud or AI providers

Reglamento (UE) 2023/2854, arts. 23-31In force

Applies from September 12, 2025

When it relates
If you offer AI or software as a cloud service to EU customers.
What the rule provides
  • Include in contracts the right to switch and export data, with notice and transition periods.
  • Remove technical and commercial barriers; charge only the direct cost of switching until Jan 12, 2027 and nothing after.
Typical evidence
  • Switching and exit contract clauses.
  • Export format documentation.
Verification
Verified in the official source on November 4, 2026Checked in the Official Journal (CELEX 32023R2854): Article 50 ("It shall apply from 12 September 2025"), Articles 23-31 (switching) and Article 29 (reduced charges capped at direct costs until Jan 12, 2027; none from that date).

Provide access to connected-product data

Reglamento (UE) 2023/2854, arts. 3-5In force

Applies from September 12, 2025

When it relates
If you make connected devices or related services that generate usage data.
What the rule provides
  • Tell users before contracting what data the product generates and how to access it.
  • Let users access the data and share it with third parties of their choice.
  • For connected products and related services placed on the market after Sep 12, 2026: design them so the user can access their data by default (Article 3(1)).
Typical evidence
  • Pre-contract data information.
  • Data access procedure.
Verification
Verified in the official source on November 4, 2026Checked in the Official Journal (CELEX 32023R2854): Article 50 sets general application on Sep 12, 2025, but "the obligation resulting from Article 3(1) shall apply to connected products… placed on the market after 12 September 2026". Articles 3(2)-3(3) (pre-contract information), 4 and 5 apply from Sep 12, 2025.

Related rules

Regulatory change alerts by country

Pick the countries you care about and we will email you when we change a rule or an application date for those countries in our registry.

  • Changes to the rules of the countries you pick, when we add them to the registry.
  • New application dates.
  • No more than one email a week. Unsubscribe at any time.

It is a free, informational notice, not a legal monitoring service: it does not necessarily catch every change or within a set time.

Countries · Pick one or more.
US states
Email language
Manage my alerts

Find out what applies to you (free)