EU Data Act — Data Access by Design Kicks In

What this countdown tracks

12 September 2026 is the date on which the EU Data Act's data-access-by-design requirements for connected products and related services apply, alongside cloud-switching and interoperability rules. From that day, manufacturers must build devices so that users can access, port, and share generated data with third parties.

Background

Regulation (EU) 2023/2854, the Data Act, entered into force on 11 January 2024 and became generally applicable on 12 September 2025. However, Article 50 and the Regulation's transitional clauses delayed the bite of several obligations. Most importantly, Chapter II design obligations — the requirement that connected products and related services be "designed, manufactured, or delivered in such a manner that [relevant] product data and related service data are, by default, easily, securely, and, where relevant and appropriate, directly accessible to the user" — apply only to products placed on the market after 12 September 2026. That date is the real-world switch-on for data-access-by-design.

The Data Act covers a broad range of connected goods: from industrial machinery and smart agricultural equipment to connected vehicles, household appliances, medical devices, and wearables. It grants users a right to receive data they generate, to share it with third parties (including rival aftermarket service providers), and — through Chapter VI rules — to switch cloud providers without excessive egress fees, with those fees phased out entirely by January 2027. Chapter V introduces mandatory business-to-government data sharing in cases of public emergency. The Regulation carves out trade-secret protection and restricts gatekeepers under the DMA from being eligible third-party recipients of data. Article 34 lays down "FRAND"-style terms for data sharing between businesses where another legal obligation requires it, while Articles 23–31 impose specific unfair-term tests on B2B data contracts involving SMEs. Commission-approved contractual templates and model clauses — published in 2025 following stakeholder consultation — shape how OEMs document data-access rights in user manuals, purchase contracts, and service-agreement addenda. Automotive industry bodies, including ACEA and CLEPA, submitted detailed position papers on the interaction between Data Act rights and the forthcoming revision of the EU Type-Approval Regulation's access-to-vehicle-data provisions.

Why the date matters

12 September 2026 is when manufacturers can no longer ship non-compliant new connected products into the EU market. It resets hardware design cycles, data-API contracts, and aftermarket service arrangements across sectors. It is also the first hard deadline for OEMs to stand up the portals, credentials systems, and documentation required to satisfy user and third-party data-access requests.

What to watch for

• Industry-specific data-access standards and trade associations' model clauses.
• Commission guidance on trade-secret carve-outs versus data-access rights.
• First disputes brought under the ADR mechanism in Article 10.
• Automotive sector interactions with type-approval and vehicle-data regimes.
• Cloud-provider switching volumes as egress fees phase down.
• Enforcement postures of national competent authorities under Article 37.
• Coordination with DMA obligations for gatekeepers handling connected-device data.

Related events to track

The DMA first review countdown may extend to cloud gatekeepers, with direct Data Act overlap. The GDPR 10-year review countdown addresses personal-data aspects. The EU AI Act enforcement countdown covers AI systems embedded in connected products.

FAQ

When exactly do Data Act design obligations apply? 12 September 2026, for connected products placed on the market after that date, under Article 50 transition rules.

Are Data Act design obligations confirmed or expected? Confirmed by Regulation (EU) 2023/2854 as published in the Official Journal.

Who is responsible for Data Act enforcement? Each Member State designates a competent authority; the European Data Innovation Board coordinates; the Commission issues guidance.

Where can I read the official announcement? A consolidated timeline is at https://www.fiskil.com/eu-data-act/timeline with the legal text on EUR-Lex.