Question 1

What is the EU Data Act?

Accepted Answer

The EU Data Act (Regulation (EU) 2023/2854) is a regulation requiring manufacturers of connected products to share product-generated data with customers and authorized third parties. It has been enforceable since September 12, 2025.

Question 2

What are the penalties for EU Data Act non-compliance?

Accepted Answer

Member states set their own penalty frameworks, but the regulation allows for fines of up to 4% of global annual turnover — the same ceiling as GDPR.

Question 3

Which manufacturers are affected by the EU Data Act?

Accepted Answer

Any manufacturer of connected products sold in the EU that generate data through sensors, software, or network connectivity. This includes industrial machinery, HVAC systems, pumps, valves, construction equipment, energy systems, and consumer IoT devices.

Question 4

What data must manufacturers share under the EU Data Act?

Accepted Answer

Under Article 3, manufacturers must make product data and related service data readily accessible to users. Under Article 4, users can request any data generated by their connected product. Under Articles 5–6, users can designate third parties to receive their data.

Question 5

What is Article 4(3) trade secret protection?

Accepted Answer

Manufacturers can withhold specific data if disclosure would cause serious economic damage through trade secret exposure. However, they must provide structured justification under Directive (EU) 2016/943 and offer a confidentiality agreement as an alternative.

Question 6

How long do manufacturers have to respond to data access requests?

Accepted Answer

The Data Act requires data to be made available "without undue delay" and within the same quality as the data holder receives. There is no fixed number of days, but the expectation from guidance documents is prompt fulfillment, typically interpreted as within 30 days.

Send an inquiry