--- title: "12 September 2025: Implementation of Certain Provisions of the Data Act" id: "2956" type: "post" slug: "12-september-2025-implementation-of-certain-provisions-of-the-data-act" published_at: "2025-09-12T08:06:54+00:00" modified_at: "2026-03-03T09:48:57+00:00" url: "https://augustdeboustg.wpenginepowered.com/en/legal-article/12-september-2025-implementation-of-certain-provisions-of-the-data-act/" markdown_url: "https://augustdeboustg.wpenginepowered.com/en/legal-article/12-september-2025-implementation-of-certain-provisions-of-the-data-act.md" taxonomy_category: - "Legal Article" taxonomy_language: - "English" taxonomy_post_translations: - "pll_6980e943b6f0b" taxonomy_tax_expertise: - "Digital and Technology Regulation" --- Menu Interagir avec notre IA Practice Areas (66) Transactional- [Artificial intelligence](https://augustdeboustg.wpenginepowered.com/en/expertise/artificial-intelligence/) - [Capital Markets](https://augustdeboustg.wpenginepowered.com/en/expertise/capital-markets/) - [Commercial and International Contracts](https://augustdeboustg.wpenginepowered.com/en/expertise/commercial-and-international-contracts/) - [Commercial Contracts and Strategic Partnerships](https://augustdeboustg.wpenginepowered.com/en/expertise/commercial-contracts-and-strategic-partnerships/) - [Competition Law, European Regulation and FDI](https://augustdeboustg.wpenginepowered.com/en/expertise/competition-state-aid/) - [Consumer, Marketing & Advertising](https://augustdeboustg.wpenginepowered.com/en/expertise/distribution-and-consumer-law/) - [Financing](https://augustdeboustg.wpenginepowered.com/en/expertise/financing/) - [Foreign Investment Control](https://augustdeboustg.wpenginepowered.com/en/expertise/foreign-investment-control/) - [Go-to-Market](https://augustdeboustg.wpenginepowered.com/en/expertise/go-to-market/) - [Intellectual Property](https://augustdeboustg.wpenginepowered.com/en/expertise/intellectual-property/) - [International Trade](https://augustdeboustg.wpenginepowered.com/en/expertise/international-trade/) - [Labor and Social Security Law](https://augustdeboustg.wpenginepowered.com/en/expertise/labor-and-social-security-law/) - [Mergers-acquisitions](https://augustdeboustg.wpenginepowered.com/en/expertise/mergers-acquisitions/) - [Patents](https://augustdeboustg.wpenginepowered.com/en/expertise/patents/) - [Personal Data and Cybersecurity](https://augustdeboustg.wpenginepowered.com/en/expertise/personal-data-and-cybersecurity/) - [Private equity](https://augustdeboustg.wpenginepowered.com/en/expertise/private-equity/) - [Projects and Infrastructure](https://augustdeboustg.wpenginepowered.com/en/expertise/projects-and-infrastructure/) - [Public Procurement](https://augustdeboustg.wpenginepowered.com/en/expertise/public-procurement/) - [Real Estate and Construction](https://augustdeboustg.wpenginepowered.com/en/expertise/real-estate-and-construction/) - [Restructuring](https://augustdeboustg.wpenginepowered.com/en/expertise/restructuring/) - [Securities Law](https://augustdeboustg.wpenginepowered.com/en/expertise/securities-law/) - [Tax](https://augustdeboustg.wpenginepowered.com/en/expertise/tax/) - [Tech And Digital](https://augustdeboustg.wpenginepowered.com/en/expertise/tech-and-digital/) Dispute Resolution- [Administrative and Public Law Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/administrative-and-public-law-litigation/) - [Arbitration and ADR](https://augustdeboustg.wpenginepowered.com/en/expertise/arbitration-and-adr/) - [Class Actions](https://augustdeboustg.wpenginepowered.com/en/expertise/class-actions/) - [Commercial and Corporate Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/commercial-and-corporate-litigation/) - [Competition Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/competition-consumer-and-distribution-litigation/) - [Constitutional Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/constitutional-litigation/) - [Defective Products and Insurance Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/defective-products-and-insurance-litigation/) - [Employment and Social Security Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/employment-and-social-security-litigation/) - [Environmental and ESG Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/environmental-and-esg-litigation/) - [European Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/european-litigation/) - [Insolvency and Restructuring](https://augustdeboustg.wpenginepowered.com/en/expertise/insolvency-and-restructuring/) - [Intellectual Property, Media, and Press Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/intellectual-property-media-and-press-litigation/) - [Patent Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/patent-litigation/) - [Real Estate, Construction, and Land Use Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/real-estate-construction-and-land-use-litigation/) - [Securities Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/securities-litigation/) - [Tax litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/tax-litigation/) - [Tech, Digital and Data Litigation](https://augustdeboustg.wpenginepowered.com/en/expertise/tech-digital-and-data-litigation/) - [White-Collar Crime and Investigations](https://augustdeboustg.wpenginepowered.com/en/expertise/white-collar-crime-and-investigations/) Advisory- [Artificial intelligence](https://augustdeboustg.wpenginepowered.com/en/expertise/artificial-intelligence/) - [Commercial Contracts and Strategic Partnerships](https://augustdeboustg.wpenginepowered.com/en/expertise/commercial-contracts-and-strategic-partnerships/) - [Consumer, Marketing & Advertising](https://augustdeboustg.wpenginepowered.com/en/expertise/distribution-and-consumer-law/) - [Go-to-Market](https://augustdeboustg.wpenginepowered.com/en/expertise/go-to-market/) - [Governance and Corporate Law](https://augustdeboustg.wpenginepowered.com/en/expertise/gouvernance-et-droit-des-societes/) - [Insurance Law](https://augustdeboustg.wpenginepowered.com/en/expertise/insurance-law/) - [Intellectual Property](https://augustdeboustg.wpenginepowered.com/en/expertise/intellectual-property/) - [Labor and Social Security Law](https://augustdeboustg.wpenginepowered.com/en/expertise/labor-and-social-security-law/) - [Patents](https://augustdeboustg.wpenginepowered.com/en/expertise/patents/) - [Private Clients](https://augustdeboustg.wpenginepowered.com/en/expertise/private-clients/) - [Tax](https://augustdeboustg.wpenginepowered.com/en/expertise/tax/) - [Tech And Digital](https://augustdeboustg.wpenginepowered.com/en/expertise/tech-and-digital/) Regulatory- [Competition Law, European Regulation and FDI](https://augustdeboustg.wpenginepowered.com/en/expertise/competition-state-aid/) - [Compliance and Investigations](https://augustdeboustg.wpenginepowered.com/en/expertise/compliance-and-investigations/) - [Digital and Technology Regulation](https://augustdeboustg.wpenginepowered.com/en/expertise/digital-and-technology-regulation/) - [Digital Assets](https://augustdeboustg.wpenginepowered.com/en/expertise/digital-assets/) - [Environmental and Urban Planning Law](https://augustdeboustg.wpenginepowered.com/en/expertise/environmental-and-urban-planning-law/) - [ESG](https://augustdeboustg.wpenginepowered.com/en/expertise/esg/) - [European Law](https://augustdeboustg.wpenginepowered.com/en/expertise/european-law/) - [International Sanctions and Export Controls](https://augustdeboustg.wpenginepowered.com/en/expertise/international-sanctions-and-export-controls/) - [International Trade](https://augustdeboustg.wpenginepowered.com/en/expertise/international-trade/) - [Personal Data and Cybersecurity](https://augustdeboustg.wpenginepowered.com/en/expertise/personal-data-and-cybersecurity/) - [Product Compliance and Safety](https://augustdeboustg.wpenginepowered.com/en/expertise/product-compliance-and-safety/) - [Public Law](https://augustdeboustg.wpenginepowered.com/en/expertise/public-law/) - [Securities Law](https://augustdeboustg.wpenginepowered.com/en/expertise/securities-law/) Sectors (13) - [Aerospace and Defense](https://augustdeboustg.wpenginepowered.com/en/secteur/aerospace-and-defense/) - [Banking & Finance](https://augustdeboustg.wpenginepowered.com/en/secteur/banking-finance/) - [Data Centers](https://augustdeboustg.wpenginepowered.com/en/secteur/data-centers/) - [Energy](https://augustdeboustg.wpenginepowered.com/en/secteur/energy/) - [Health and Life Sciences](https://augustdeboustg.wpenginepowered.com/en/secteur/health-and-life-sciences/) - [Infrastructure Projects](https://augustdeboustg.wpenginepowered.com/en/secteur/infrastructure-projects/) - [Luxury And Retail](https://augustdeboustg.wpenginepowered.com/en/secteur/luxury-and-retail/) - [Manufacturing](https://augustdeboustg.wpenginepowered.com/en/secteur/manufacturing/) - [Media](https://augustdeboustg.wpenginepowered.com/en/secteur/media/) - [Real Estate & Construction](https://augustdeboustg.wpenginepowered.com/en/secteur/real-estate-construction/) - [Sport](https://augustdeboustg.wpenginepowered.com/en/secteur/sport/) - [Tech & Digital](https://augustdeboustg.wpenginepowered.com/en/secteur/tech-digital/) - [Telecommunications & Digital Infrastructure](https://augustdeboustg.wpenginepowered.com/en/secteur/telecommunications-digital-infrastructure/) Cet article résumé en une minute avec l’IA Regulation (EU) 2023/2854 of 13 December 2023, establishing common rules on fair access to and use of data (the “Data Act”), governs the access, sharing, and portability of data generated by connected products and related services. Its objective is to ensure that users have effective control over the data they generate. The Data Act applies to a broad range of stakeholders: manufacturers of connected products, data holders (which may include such manufacturers or providers of related services), data processing service providers, users (whether individuals or businesses), data recipients (any natural or legal person, including third parties, receiving data from a data holder on a user’s request or under a legal obligation), and public sector bodies. Entered into force on 11 January 2024, several of its provisions take effect 12 September 2025. **Access to Data Generated by Connected Products** Starting 12 September 2025, connected product manufacturers and providers of related services must ensure that users can easily access the data generated by these products and services. Access must be free of charge and provided in a complete, structured, commonly used, and machine-readable format. However, this obligation applies only to connected products and related services placed on the market after 12 September 2026. **Data Sharing with Third Parties** Chapter III of the Data Act also takes effect after 12 September 2025. It governs situations where data holders are required, under EU or national law, to make data available. Under these provisions, users may request that their data be shared with any third party of their choosing. Manufacturers and service providers must facilitate such data transfers without imposing contractual restrictions and must do so in a secure and documented manner. **Regulation of Data-Sharing Contracts** Chapter IV of the Data Act addresses unfair contractual terms in business-to-business (B2B) agreements relating to access to and use of data. These provisions will apply to all contracts signed after 12 September 2025. For contracts concluded on or before 12 September 2025 that are either of indefinite duration or set to expire ten years or more after 11 January 2024, Chapter IV will apply starting 12 September 2027. To facilitate compliance, the European Commission has published non-binding model contractual clauses covering data access, data use, fair compensation, and protection of trade secrets. **Cloud Service Portability** Cloud service providers are required to enable customers to migrate their data to another provider easily. As of 12 September 2025, all technical and contractual barriers to such transfers must be removed. Starting in 2027, providers will no longer be permitted to charge migration fees. **Sanctions** Under Article 40 of the Data Act, Member States must notify the European Commission by 12 September 2025 of the penalties applicable for violations of the Regulation and the measures adopted to ensure their enforcement. In particular, for breaches relating to: - Data sharing between businesses and consumers or between businesses, - Obligations of data holders to make data available, and - The provision of data to public sector bodies, the Commission, the European Central Bank, or EU institutions in cases of exceptional need Article 40 specifies that national supervisory authorities, such as the CNIL in France, will have the power to impose administrative fines under the same regime as Article 83 of the GDPR — that is, up to €20 million or 4% of global annual turnover, whichever is higher. Share - Linkedin - Copy Link Cet article résumé en une minute avec l’IA ### Authors 3 - [Charlotte Chen](https://augustdeboustg.wpenginepowered.com/en/collaborateur/charlotte-chen-2/) - [Léa Margono](https://augustdeboustg.wpenginepowered.com/en/collaborateur/lea-margono-2/) - [Marc Mossé](https://augustdeboustg.wpenginepowered.com/en/collaborateur/marc-mosse-2/) ### Practice Area 1 - [Digital and Technology Regulation](https://augustdeboustg.wpenginepowered.com/en/tax-expertise/digital-and-technology-regulation/) ## Discover more content that might interest you News [19/12/25 Legal Article 15 min Digital Omnibus Regulation on AI Will the European principle of Smart Regulation eventually benefit artificial intelligence? One can only hope so. As Regulation (EU) 2024/1689 of 13 June 2 Read more](https://augustdeboustg.wpenginepowered.com/en/legal-article/digital-omnibus-regulation-on-ai/) [31/07/25 Legal Article 4 min August 2, 2025: A New Milestone in the Implementation of the AI Act AI Act: next phase of implementation on August 2, 2025 Read more](https://augustdeboustg.wpenginepowered.com/en/legal-article/august-2-2025-a-new-milestone-in-the-implementation-of-the-ai-act/) [11/07/25 Legal Article 4 min Entry into force of Directive (EU) 2019/882: accessibility by design. The European Directive on the accessibility of products and services (commonly known as the EEA Act) requires businesses to incorporate accessibility into the design of their digital and physical offerings. This is a legal imperative that anchors an essential ethical requirement. It came into force on 28 June 2025. Read more](https://augustdeboustg.wpenginepowered.com/en/legal-article/entry-into-force-of-directive-eu-2019882-accessibility-by-design/)