The EU's Model Contractual Terms for Data Sharing and Cloud Switching

The Data Act tells companies what their contracts must achieve, fair data-sharing terms, workable cloud exit rights, but for a long time it did not show anyone what a compliant clause actually looks like. That gap is being filled: the regulation tasked the European Commission with developing model contractual terms for data access and use, and standard contractual clauses for cloud computing contracts, developed with an expert group and published as non-binding recommendations. If you have been putting off your Data Act contract work for lack of a starting point, that excuse is expiring.

What the model terms are

Two families of templates are involved. The model contractual terms (MCTs) address data sharing under the data-access chapters: terms between data holders and users, and between data holders and third-party recipients, covering questions like scope of use, compensation, trade-secret protection and termination. The standard contractual clauses (SCCs) for cloud computing address the switching chapter: notice periods, the transition process, data and asset export, assistance, erasure, and how charges are handled as the 12 January 2027 withdrawal of switching fees approaches.

What they are not

They are not mandatory, and using them is not a certification. A contract can comply with the Data Act without borrowing a single sentence from the templates, and pasting the templates in unedited does not immunise a contract that contradicts them elsewhere. They are also not a substitute for scoping: model switching clauses are irrelevant if your real exposure is Article 13 unfair terms, and vice versa. Treat them the way the market treats GDPR standard clauses, a reference implementation that shifts the burden of explaining yourself onto whoever deviates from it.

Why smaller companies should care most

Large vendors have counsel to draft bespoke Data Act addenda. A ten-person SaaS does not, and that is exactly who reference terms help. Aligning your switching addendum with the Commission's clauses gives you three things: a defensible answer in enterprise procurement reviews, a shortcut through legal drafting you would otherwise pay for, and a benchmark against which your existing contract's gaps become visible. The reverse also applies: when a big supplier hands you their paper, comparing it against the model terms is the fastest way to spot where they have quietly deviated in their own favour.

Where the deadlines meet the templates

The switching rules have applied since 12 September 2025, with switching charges expected to be withdrawn from 12 January 2027, so cloud and SaaS providers have a bounded window to bring EU-facing terms in line. The unfair-terms regime of Article 13 has covered new contracts since September 2025 and is set to reach certain long-term legacy contracts from 12 September 2027. A sensible sequence: screen your current terms first, then use the model clauses as the redraft baseline for whatever fails the screen.

A practical adoption checklist

1. Identify which template family matters for you: data-sharing terms for device makers and related services, cloud clauses for SaaS and infrastructure providers, often both.
2. Compare your standard contract clause-by-clause against the relevant model terms and note every deviation.
3. Decide deliberately which deviations you keep, with a written reason, and which you align.
4. Version the result as a Data Act addendum so existing customers can adopt it without reopening the whole agreement.

Enforcement context

Model terms are voluntary; the obligations behind them are not. Member states set the penalties, and Germany's Bundesnetzagentur has been enforcing under the national implementation act since May 2026, with tiered fines of up to EUR 500,000 and GDPR-level exposure where personal data is involved. A contract visibly aligned with the Commission's own templates is a strong opening position in any conversation with a regulator, or with an enterprise buyer's legal team.

Not sure which contract obligations apply to your company in the first place? Our free readiness assessment maps your Data Act exposure in about three minutes, before you open a single template.