Overview
- From 12 September 2025, manufacturers must disclose what device data they collect and provide users with machine‑readable access free of charge, covering both newly sold and already marketed products.
- Users can obtain data either directly through a device or app interface or by submitting a simple request via a provider portal, with a further step requiring new vehicles from 12 September 2026 to be designed for access by default.
- The rules span a wide range of connected devices, including cable‑linked products, and also mandate easier switching between cloud providers and limited public‑interest access for authorities in emergencies.
- Germany has yet to finalize an implementing law or assign clear oversight, leaving complaint channels and Data Act penalties largely inoperative, though some state data protection authorities signal interim handling of related cases.
- Industry groups Bitkom and BDI warn of legal uncertainty and low business readiness, consumer group BEUC cites too many exceptions, and Germany’s regulator notes firms must supply data generated from 12 September 2025 onward.