Top 10 Questions About the EU Data Act | Morrison & Foerster LLP

by Chief Editor

The EU Data Act: Reshaping the Future of Data Ownership and Innovation

The European Union’s Data Act, now firmly on the path to implementation (September 12, 2025), isn’t just a regulatory shift; it’s a foundational change in how data is perceived, accessed, and utilized. It’s moving Europe towards a data-driven economy where individuals and businesses have more control, fostering innovation and competition. But what does this mean for the future? Beyond the immediate compliance concerns, several key trends are emerging.

The Rise of Data Interoperability Standards

The Data Act’s emphasis on interoperability is a game-changer. Currently, data often exists in silos, locked within proprietary systems. The Act pushes for open interfaces and standardized data formats. Expect to see a surge in the development and adoption of these standards, particularly within the Industrial Internet of Things (IIoT) and smart infrastructure sectors. A recent report by Gartner predicts that by 2027, organizations adopting data fabric architectures – a key enabler of interoperability – will see a 30% improvement in data access and agility.

Pro Tip: Businesses should proactively monitor the EU standards repository for emerging specifications and begin assessing their compatibility needs now. Don’t wait for the deadline!

Data Portability as a Competitive Advantage

The ability for customers to easily switch between service providers, taking their data with them, will fundamentally alter the competitive landscape. Companies that make data portability seamless will gain a significant advantage. We’re already seeing this in the consumer space with services like Google Takeout, but the Data Act extends this principle to B2B relationships. This will likely lead to a “portability premium” – customers will be willing to pay more for services that guarantee easy data migration.

The Growth of Data Intermediaries

Not all businesses have the technical expertise or resources to manage data access and sharing effectively. This creates an opportunity for data intermediaries – trusted third parties that facilitate secure and compliant data exchange. These intermediaries will act as a bridge between data holders and data users, offering services like data cleaning, anonymization, and access control. A study by IDC forecasts that the data intermediary market will reach $7.5 billion by 2026.

Increased Focus on Data Security and Privacy

While the Data Act promotes data sharing, it doesn’t compromise on security or privacy. In fact, it reinforces the principles of GDPR. Expect to see increased investment in privacy-enhancing technologies (PETs) like differential privacy and homomorphic encryption. These technologies allow data to be analyzed without revealing sensitive information. The recent surge in cyberattacks further underscores the importance of robust data security measures.

Did you know? The EU is investing heavily in cybersecurity initiatives, including the development of a European Cybersecurity Competence Centre, to support the implementation of the Data Act and other digital policies.

The Evolution of Cloud Computing Contracts

The Data Act’s provisions on cloud switching will necessitate a significant overhaul of cloud computing contracts. The days of vendor lock-in are numbered. Contracts will need to be more transparent, outlining data access rights, switching procedures, and associated costs. The European Commission’s draft Standard Contractual Clauses (SCCs) provide a useful starting point, but businesses should tailor them to their specific needs. Expect to see a rise in demand for multi-cloud and hybrid cloud solutions, giving customers more flexibility and control.

The Impact on Industrial IoT and Smart Manufacturing

The IIoT stands to benefit enormously from the Data Act. By enabling seamless data exchange between machines, manufacturers can optimize production processes, improve predictive maintenance, and develop new data-driven services. For example, a factory could share data from its sensors with a third-party analytics provider to identify potential bottlenecks and improve efficiency. This will accelerate the adoption of Industry 4.0 technologies and drive innovation in manufacturing.

The Challenge of Defining “Derived Data”

The distinction between “readily available” and “derived” data remains a point of contention. Organizations are grappling with how to determine when data processing crosses the line from simple technical processing to the creation of new, proprietary information. Expect to see further clarification from the European Commission and potentially legal challenges as businesses navigate this complex issue. A conservative approach – erring on the side of sharing data – is advisable.

Frequently Asked Questions (FAQ)

  • What is the key goal of the EU Data Act? To empower users with greater control over their data and foster a more competitive data economy.
  • Will the Data Act affect all businesses? Primarily those offering connected products or data processing services within the EU.
  • What are data intermediaries? Third-party services that facilitate secure and compliant data exchange between data holders and users.
  • What is data portability? The ability for users to easily transfer their data between different service providers.
  • How does the Data Act relate to GDPR? It complements GDPR by reinforcing data privacy principles while promoting data sharing.

The EU Data Act is a landmark piece of legislation with far-reaching implications. It’s not just about compliance; it’s about embracing a new data paradigm. Businesses that proactively adapt to these changes will be best positioned to thrive in the evolving digital landscape.

Want to learn more? Explore our other articles on data governance and digital transformation here. Subscribe to our newsletter for the latest updates on the Data Act and its impact on your business here.

You may also like

Leave a Comment