Share on LinkedInShare on LinkedIn

ARTICLE · 16 SEPTEMBER 2026

Who Holds The Data? The EU Data Act's Access By Design Rules Take Effect

Withers LLP
Withers LLP
Contributor
Withers LLP

Withers LLP

Withers is an international law firm focused on the personal, business and philanthropic interests...

View firm profile
Explore more from Withers LLP

The EU Data Act introduces new access by design requirements for connected products and related services, fundamentally changing how IoT providers must handle product data accessibility. As the first anniversary of the Act's general applicability approaches, manufacturers and service providers face critical compliance deadlines that will reshape data access standards across the smart device market.

United KingdomTechnology

The EU Data Act (Regulation (EU) 2023/2854) (the 'Act') came into force on 11 January 2024, before becoming generally applicable on 12 September 2025. The Act ushered in new rules for digital economy providers and users, primarily by granting users more control over data generated by 'smart' products and devices, whilst also adding additional flexibility around data switching and portability for customers of data processing services. 

To mark the first anniversary of the Act's general applicability, one of the deferred areas of the Act – the access by design rules for connected products and related services (Article 3(1)) comes into effect, applying to any connected products or related services placed onto the EU market after 12 September 2026. 

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from