Overview
- Manufacturers of connected products must give owners direct access to the data their devices generate in a standardized, machine-readable format for export or sharing.
- The law’s main obligations apply to devices sold from 12 September 2026, with retrofits for older products only where technically feasible.
- Companies must clearly disclose what data they collect, where it is stored and how it is used, improving buyer transparency for items such as robot vacuums.
- Cloud providers must make switching easier to reduce lock-in and open the market to more competition and independent services.
- Automotive and other sectors must enable user and trusted third-party access to operational data, while authorities may obtain limited, time-bound access in defined emergencies as member states such as Germany finalize implementing rules.