The EU Data Act is now in force.
Is your product compliant?
If you sell SaaS, cloud services or connected devices to EU customers, the Data Act already applies to you. Access-by-design took effect on 12 September 2026, cloud switching fees end on 12 January 2027, and regulators are live: Germany's Bundesnetzagentur is already enforcing, and infringements involving personal data can draw GDPR-scale fines of up to 4% of global turnover.
Next deadline: Cloud switching fees ban
Free · 3 minutes · no signup · instant score
This law is broader than most teams think
The Data Act is not just for IoT giants. Three groups are directly on the hook:
SaaS & cloud providers
Every "data processing service" sold to EU customers must include mandatory switching & exit clauses (max 2-month notice, 30-day transition), cost-capped egress fees, banned entirely from 12 Jan 2027, and public export documentation.
Connected product makers
Devices, machines, vehicles, sensors: users can already demand their data. From 12 Sept 2026, new products must ship with direct, free, machine-readable data access designed in by default.
B2B data sharers
Unilaterally imposed contract terms around data access, liability and remedies can now be legally void under the Art. 13 unfair terms rules, and mandated sharing must happen on FRAND terms.
From "no idea" to a compliance plan in 10 minutes
Answer a few questions
A guided assessment scopes exactly which Data Act chapters apply to your business, connected products, cloud switching, B2B contracts.
Get your readiness score
Instant 0–100 score with per-area breakdown and your gaps ranked critical → medium, each mapped to the specific article. Free.
Download your compliance pack
Customized documents generated from your answers: switching-terms addendum, data access policy, technical checklists and a prioritized 30-day action plan.
Simple pricing. No subscription.
Readiness assessment
€0 forever
- Full 14-question scoped assessment
- 0–100 readiness score + grade
- Per-area breakdown
- Your top compliance gaps identified
Compliance pack
€49 one-time
- Everything in the free assessment
- Cloud Switching Terms Addendum, the Art. 25 clauses your contracts must contain, ready to adapt
- User Data Access Policy + internal request procedure (Art. 3–5)
- Access-by-Design technical checklist for the 12 Sept 2026 deadline
- B2B unfair-terms & FRAND checklist (Art. 8–9, 13)
- Prioritized 30-day action plan generated from your answers
- All documents customized with your company details
Delivered instantly in your browser · print or save as PDF
Questions founders actually ask
We're a small SaaS outside the EU. Does this really apply to us?
If you provide a cloud or SaaS service to customers in the EU, the switching and contract-term rules apply regardless of where your company is based, like GDPR, the Data Act follows the customer, not the vendor.
What actually happened on 12 September 2026?
Connected products (and their related services) placed on the EU market after that date must be designed so users can access product data directly, easily, securely and free of charge by default. The user-access and cloud-switching obligations have already applied since 12 September 2025.
What are the penalties?
Each member state sets its own penalty regime. Germany's implementation act, in force since May 2026, gives the Bundesnetzagentur tiered fines of up to EUR 500,000, and where personal data is involved data protection authorities can impose GDPR-level fines of up to 4% of global turnover. Unfair contract terms can also simply be declared void, which can invalidate parts of your standard contracts.
Is this legal advice?
No. DataAct Ready gives you a structured readiness assessment and professionally drafted template documents mapped to the regulation's articles. It's the 90% of groundwork that makes your (or your lawyer's) remaining work fast and cheap, not a substitute for counsel on your specific facts.
How is the pack delivered?
Instantly, in your browser, customized with your company details and assessment answers. Every document can be printed, saved as PDF, or downloaded as Markdown to edit further.
EU Data Act guides
Plain-English explainers on what applies to you, by when, and what to do about it. No legalese.
What the EU Data Act Means for Industrial Machinery Makers
How the EU Data Act applies to CNC machines, robots, compressors and other industrial equipment, what machine builders must share, and how to protect trade secrets.
Read the guide →Does the EU Data Act Apply to UK Companies After Brexit?
What UK manufacturers, SaaS providers and cloud vendors need to know about the EU Data Act, which obligations reach across the Channel, and when the deadlines hit.
Read the guide →Why Big Tech Gatekeepers Cannot Receive Data Under the EU Data Act
The EU Data Act lets users share connected product data with third parties, but companies designated as gatekeepers under the Digital Markets Act are excluded as recipients. Here is how the exclusion works.
Read the guide →Ten minutes now beats a regulator's letter later.
Find out exactly where you stand, free.
Start the free assessment