The Data Act Comes For Everyone

GTG Legal

Contributor

GTG Legal

Since its founding in 1997, GTG has been at the forefront of Malta’s legal profession, blending...

View firm profile

Explore more from GTG Legal

On 12 September 2025 the EU Data Act starts to apply. From that moment, every manufacturer of a connected product, every provider of a related service...

MaltaPrivacy

Ian Gauci

Data Act

On 12 September 2025 the EU Data Act starts to apply. From that moment, every manufacturer of a connected product, every provider of a related service, and every operator of a cloud infrastructure in Europe will carry duties that go further than anything the sector has seen. The Regulation entered into force in January 2024, but the real grip begins in September.

On the surface it looks like a data sharing law. In reality it's an operational, legal and commercial turning point. It reaches deep into industrial IoT, automotive maintenance, fintech, gaming and healthcare devices. It applies to manufacturers of sensors and connected equipment in ports, energy plants and factories. It affects gaming platforms, payment processors, insurers that rely on telematics, and every cloud or software provider delivering services in the European market.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The Data Act Comes For Everyone

Data Act

Related Articles

Understanding the New ‘Access by Design’ Requirements

When Does A Data Subject Access Request Become Excessive?

Building Trust At Scale: Data Protection Beyond The Privacy Policy

EDPB Adopts DPIA Template: A Step Toward Enhanced GDPR Compliance And Accountability

When AI And GDPR Intersect: A Regulator’s View | Sharon Xuereb With Ian Deguara (Podcast)

Read more about

Related Comparative Guides

Data Protection & Cybersecurity

See more popular content from

EU General Court Upholds The EU-US Data Privacy Framework

The European Data Protection Board Adopts New Guidelines On Consent

Inteligo Case: Direct Marketing, Free Accounts, EPrivacy And The GDPR

CJEU Invalidates The EU-US Privacy Shield Framework

The KNLTB Case: Legitimate Interests & AI

Understanding the New ‘Access by Design’ Requirements

EDPB Guidelines Require Specific Details Of Security Measures For Data Processing Agreements

GDPR Liability For Online Marketplaces: No Safe Harbour Under The E-Commerce Directive

Landmark CJEU Data Protection Judgement: EU-US Privacy Shield Declared Invalid

AI, Machine Learning & Big Data Laws And Regulations

The European Data Protection Board Adopts New Guidelines On Consent

Inteligo Case: Direct Marketing, Free Accounts, EPrivacy And The GDPR

The KNLTB Case: Legitimate Interests & AI

AI And The Redefinition Of Law In Code: The Future Of Legal Intention Under Article 4 DSM

ECJ Rules On Restrictions To Lawyers Bar Admission

Reflections On Stablecoins In 2026

AMLA Publishes Draft RTSs: Strengthening EU AML/CFT Supervision

DORA: Drafting And Reviewing ICT Services Agreements

Newly Revised Legal Grounds For The Processing Of Personal Health Data For Insurance Purposes

Proposal Of The EU Regulation On Markets In Crypto-Assets Now Officially Released: The End Of National Crypto-Asset Legal Regimes Within The EU Seems Near