Data Act
Data Act (Regulation (EU) 2023/2854)
- Jurisdiction
- European Union · EU
- In force since
- 12 September 2025
- Primary source
- Official text
Who it applies to
Products and related services that generate connected-device data.
Documents it requires
- Terms of service
- Privacy policy
Rights it grants
- Access a copy of their data
- Receive their data in a portable format
Cookies and consent
This framework does not regulate trackers specifically. The rules of the markets you also serve still apply.
Key provisions
- Art. 3 — Connected products must make their data accessible by design
- Art. 4 — User right of access to product and related service data
- Art. 5 — Right to share data with a third party
What we are watching in Unión Europea
These are the changes our update engine tracks for this market. When one takes effect, the documents it affects are regenerated and republished — you do not have to notice it yourself.
- EU AI Act — modelos de propósito general (GPAI)2 August 2025
Obligaciones para proveedores de modelos de IA de propósito general: documentación técnica y resúmenes de datos de entrenamiento.
- EU Data Act12 September 2025
Nuevas reglas de acceso y portabilidad de datos generados por productos y servicios conectados.
- EU AI Act — obligaciones de transparencia (art. 50)from 2 August 2026
Aplican las obligaciones de transparencia del Reglamento de IA: avisar de que se interactúa con IA y etiquetar el contenido generado. El Omnibus digital (adoptado en junio de 2026) mantiene esta fecha.
- EU AI Act — fin de la gracia para el marcado de contenido (Omnibus digital)from 2 December 2026
Termina el periodo de gracia del Omnibus digital: los sistemas de IA generativa ya comercializados antes del 2 de agosto de 2026 deben incorporar el marcado legible por máquina del contenido generado (art. 50.2).
- EU AI Act — sistemas de alto riesgo (Anexo III)from 2 December 2027
Aplican las obligaciones para sistemas de alto riesgo independientes del Anexo III, aplazadas del 2 de agosto de 2026 al 2 de diciembre de 2027 por el Omnibus digital; los sistemas embebidos en productos regulados (Anexo I) pasan al 2 de agosto de 2028.
- EU AI Act — sistemas de alto riesgo embebidos (Anexo I)from 2 August 2028
Aplican las obligaciones para sistemas de IA de alto riesgo embebidos en productos regulados (Anexo I), aplazadas al 2 de agosto de 2028 por el Omnibus digital.
See what your site is actually missing
Paste your URL. We fetch the live page, detect the trackers, payments and AI calls that really ship to visitors, and tell you which documents and consent you need. No signup.
No signup · result in seconds
Data Act for your kind of product
- Data Act for a SaaS
- Data Act for a marketplace
- Data Act for an online store
- Data Act for a mobile app
- Data Act for an AI chatbot
- Data Act for an AI image generator
- Data Act for an AI writing tool
- Data Act for a fintech app
- Data Act for a health app
- Data Act for an education platform
- Data Act for a community platform
- Data Act for a newsletter
- Data Act for a booking site
- Data Act for a portfolio site
This page is an engineering summary of publicly available regulatory requirements, generated from LexVibe's framework registry — not legal advice. Every framework links to its official text so you can check it yourself. For decisions about your own compliance posture, consult the primary sources and a lawyer qualified in the relevant jurisdiction.