On January 11th, 2024, the 𝐄𝐔 𝐃𝐚𝐭𝐚 𝐀𝐜𝐭 entered into force, despite its applicability starts on September 12th, 2025.
This Act introduces fundamental changes: it establishes rules on the 𝐬𝐡𝐚𝐫𝐢𝐧𝐠 𝐨𝐟 𝐝𝐚𝐭𝐚 generated through the use of connected products or related services and it allows users to access the data they generate. In particular, the act provides specific 𝐨𝐛𝐥𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐫𝐞𝐪𝐮𝐢𝐫𝐞𝐦𝐞𝐧𝐭𝐬: e.g., it obliges data holders (both people and companies) to share personal and non-personal data that is obtained, generated or collected from data recipients, therefore, upon request by a 𝐝𝐚𝐭𝐚 𝐫𝐞𝐜𝐢𝐩𝐢𝐞𝐧𝐭, the 𝐝𝐚𝐭𝐚 𝐡𝐨𝐥𝐝𝐞𝐫𝐬 must provide access to certain data. Data holders are also obliged to make data available to third parties – under data sharing contracts – and to public bodies in case of emergencies. Moreover, the 𝐦𝐚𝐧𝐮𝐟𝐚𝐜𝐭𝐮𝐫𝐞𝐫𝐬 of products collecting data must ensure that data captured by their products are available to users and they need to prevent international access and transfer of non personal data held in the EU that could create a conflict with EU law.
The Act is evidently aimed at creating a 𝐫𝐨𝐛𝐮𝐬𝐭 𝐚𝐧𝐝 𝐞𝐪𝐮𝐢𝐭𝐚𝐛𝐥𝐞 𝐝𝐢𝐠𝐢𝐭𝐚𝐥 𝐞𝐜𝐨𝐧𝐨𝐦𝐲, emphasizing accessibility, fairness and innovation, advocating for a resilient data infrastructure that upholds European values and principles.