The European Union’s Data Act

The Data Act is part of the EU's broader European Strategy for Data where, along with other similarly comprehensive regulations on various aspects of data, the EU plans on having strong data protection mechanisms in place for a robust digital economy by 2030;

The Data Act promotes data interoperability by introducing rules for common standards and frameworks that would ensure data can safely and, more importantly, legally flow across multiple systems and industries;

The Data Act will apply to all non-personal data generated by connected devices and their associated services, such as via the Internet of Things or data generated via sensors;

Vitally, the Data Act provides further clarity related to international data transfers, ensuring that all data that originates within the EU will remain subject to EU law, such as the GDPR, even when the data is transferred outside the EU;

Each EU member state will designate one or more competent authorities to be responsible for the application and enforcement of the Data Act, which will be referred to as competent authorities;

Member states have until September 12, 2025, to forward their rules related to penalties applicable within their jurisdictions for violations and non-compliance to the European  Commission;

The European Commission is required to maintain and update an easily accessible public register for all such rules.