---
title: "EU Data Act FAQ: scope, access rights, B2G, cloud switching, GDPR, and dates"
canonical_url: "https://www.sorena.io/artifacts/eu/data-act/faq"
source_url: "https://www.sorena.io/artifacts/eu/data-act/faq/items/page/29"
author: "Sorena AI"
description: "EU Data Act FAQ index covering connected-product access, third-party sharing, B2G exceptional need, cloud switching, smart contracts, GDPR boundaries, unfair terms, and application dates."
published_at: "2026-05-06"
updated_at: "2026-07-25"
keywords:
  - "EU Data Act FAQ"
  - "Data Act scope"
  - "connected product data"
  - "B2G data sharing"
  - "cloud switching"
  - "GDPR Data Act"
  - "EU Data Act"
  - "Data Act FAQ"
  - "Regulation (EU) 2023/2854"
---
**[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform

[Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io)

---

# EU Data Act FAQ: scope, access rights, B2G, cloud switching, GDPR, and dates

EU Data Act FAQ index covering connected-product access, third-party sharing, B2G exceptional need, cloud switching, smart contracts, GDPR boundaries, unfair terms, and application dates.

*FAQ* *EU* *Data Act*

## EU Data Act FAQ hub

Answers to the recurring EU Data Act questions that decide whether connected-product data, related-service data, B2G requests, cloud contracts, or smart-contract tooling need a compliance review.

This index helps orient product, legal, cloud, procurement, data protection, security, and public-sector request teams before opening the deeper topic modules.

The Data Act, Regulation (EU) 2023/2854, has applied generally since 12 September 2025. It gives qualifying users access to readily available data from connected products and related services, sets terms for mandatory business-to-business data sharing, creates a narrow public-sector exceptional-need route, and regulates switching between data processing services. It also addresses unfair contract terms, unlawful third-country government access to non-personal data, interoperability, and smart contracts. GDPR and sector-specific EU rules continue to apply alongside it.

## Definitions

### EU Data Act

**Term:** Data Act

The Data Act is Regulation (EU) 2023/2854, a directly applicable EU regulation on access to and use of data. It covers connected-product and related-service data, legally required business-to-business data sharing, exceptional public-sector requests, switching between data processing services, unfair data-contract terms, interoperability, and smart contracts.

**Why it matters here:** The applicable chapter depends on the actor, data, product or service, and transaction. The regulation has applied generally since 12 September 2025, but several duties have separate transition rules.

Sources:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io)

## Browse sub-FAQ modules

### [Data Act and Data Governance Act Overlap FAQ](/artifacts/eu/data-act/faq/data-governance-act-overlap.md)

FAQ explaining where the EU Data Act and Data Governance Act overlap, how they differ, and how to route product, cloud, public-sector reuse, intermediary, and data altruism workflows.

- 12 items

### [Data Act Audit Evidence and Request Logs FAQ](/artifacts/eu/data-act/faq/audit-evidence-and-request-logs.md)

FAQ for Data Act request logs covering user and third-party access, B2G exceptional need requests, cloud switching records, contract terms, trade secrets, and GDPR boundaries.

- 12 items

### [Data Act Cloud Switching Contract Terms FAQ](/artifacts/eu/data-act/faq/cloud-switching-contract-terms.md)

FAQ on EU Data Act cloud switching contract terms: Article 25 clauses, assistance, notice, transition, charges, export, termination, interoperability, and records.

- 12 items

### [Data Act Cloud Switching Fees and Deadlines FAQ](/artifacts/eu/data-act/faq/cloud-switching-fees-and-deadlines.md)

FAQ on EU Data Act cloud switching charges, 2027 fee removal, notice periods, transition windows, data retrieval, contract terms, and evidence records.

- 12 items

### [Data Act Complaints and Dispute Settlement FAQ](/artifacts/eu/data-act/faq/complaints-and-dispute-settlement.md)

FAQ on EU Data Act complaints, competent authorities, dispute settlement bodies, B2B data-sharing disputes, B2G requests, cloud switching disputes, and evidence records.

- 12 items

### [Data Act Exportable Data and Metadata FAQ](/artifacts/eu/data-act/faq/exportable-data-and-metadata.md)

FAQ explaining which product, related service, metadata, and cloud switching data must be exportable under the EU Data Act, and which data can be excluded.

- 12 items

### [Data Act FAQ for Aftermarket Repair and Mobility Services](/artifacts/eu/data-act/faq/aftermarket-repair-and-mobility-services.md)

FAQ on EU Data Act vehicle-data access for repairers, independent service providers, fleets, insurers, and mobility services.

- 12 items

### [Data Act SME Exceptions and Startups FAQ](/artifacts/eu/data-act/faq/sme-exceptions-and-startups.md)

FAQ on where the EU Data Act gives micro, small, medium-sized, startup, and SME actors narrower treatment for access duties, compensation, and B2B terms.

- 12 items

### [Data Act Trade Secret Technical Protection Measures FAQ](/artifacts/eu/data-act/faq/trade-secret-technical-protection-measures.md)

FAQ on how EU Data Act data holders can protect trade secrets with confidentiality safeguards, technical measures, limited withholding, suspension, refusal, and evidence.

- 12 items

### [EU Data Act and Common European Data Spaces FAQ](/artifacts/eu/data-act/faq/data-act-and-common-european-data-spaces.md)

FAQ on how EU Data Act interoperability duties, Data Governance Act rules, and sector data-space governance fit together without treating participation as a general obligation.

- 12 items

### [EU Data Act and GDPR: Personal Data Overlap FAQ](/artifacts/eu/data-act/faq/gdpr-personal-data-overlap.md)

FAQ on how the EU Data Act works when connected-product or related-service data includes personal data, mixed datasets, GDPR roles, lawful basis, trade secrets, and third-party sharing.

- 12 items

### [EU Data Act Application Dates and Transition FAQ](/artifacts/eu/data-act/faq/application-dates-and-transition.md)

FAQ on when the EU Data Act applies, which obligations are delayed, and what product, contract, cloud, and evidence records teams should maintain.

- 12 items

### [EU Data Act Article 32: Foreign Government Access FAQ](/artifacts/eu/data-act/faq/international-government-access.md)

FAQ on EU Data Act safeguards for non-EU government access to non-personal data held in the Union by data processing service providers.

- 12 items

### [EU Data Act Article 36 Smart Contract Controls FAQ](/artifacts/eu/data-act/faq/article-36-smart-contract-controls.md)

FAQ explaining when EU Data Act Article 36 applies to smart contracts for data-sharing agreements and what controls, conformity evidence, and limits it requires.

- 12 items

### [EU Data Act B2B Data Sharing Compensation FAQ](/artifacts/eu/data-act/faq/compensation-for-b2b-data-sharing.md)

FAQ on when Data Act data holders may charge B2B data recipients, what reasonable compensation can include, SME limits, unfair terms, disputes, and trade secret safeguards.

- 12 items

### [EU Data Act B2G Compensation and Costs FAQ](/artifacts/eu/data-act/faq/b2g-compensation-and-costs.md)

FAQ on when Data Act B2G exceptional-need requests are free, when fair compensation may be claimed, which costs can be included, and what records to keep.

- 12 items

### [EU Data Act B2G Exceptional Need FAQ](/artifacts/eu/data-act/faq/b2g-exceptional-need.md)

When public-sector bodies can request business-held data under the EU Data Act, what a valid request must contain, and how data holders handle limits, trade secrets, compensation, and evidence.

- 13 items

### [EU Data Act Cloud Switching Procurement FAQ](/artifacts/eu/data-act/faq/cloud-switching-procurement-checklist.md)

Procurement checklist FAQ for EU Data Act cloud switching: contract terms, exit support, exportable data, switching charges, interoperability, termination, and supplier evidence.

- 12 items

### [EU Data Act Connected Product Scope FAQ](/artifacts/eu/data-act/faq/scope-connected-products.md)

FAQ explaining when connected products, related services, generated data, EU market placement, and SME exceptions fall within EU Data Act scope.

- 12 items

### [EU Data Act data spaces interoperability FAQ](/artifacts/eu/data-act/faq/data-spaces-interoperability.md)

FAQ explaining Article 33 Data Act interoperability requirements for data-space participants, common European data spaces, standards, APIs, metadata, and architecture evidence.

- 12 items

### [EU Data Act Direct Access by Design FAQ](/artifacts/eu/data-act/faq/direct-access-by-design.md)

FAQ for product and legal teams designing user access to connected-product and related-service data under the EU Data Act.

- 12 items

### [EU Data Act Enforcement and Competent Authorities FAQ](/artifacts/eu/data-act/faq/enforcement-and-competent-authorities.md)

FAQ on who enforces the EU Data Act, how complaints work, how Member States set penalties, when dispute settlement can be used, and when GDPR authorities remain responsible.

- 13 items

### [EU Data Act Functional Equivalence: IaaS Switching FAQ](/artifacts/eu/data-act/faq/functional-equivalence.md)

FAQ on Data Act functional equivalence for cloud switching: IaaS scope, customer outcomes, export support, interoperability duties, limits, and evidence.

- 12 items

### [EU Data Act Indirect Access Request Workflow FAQ](/artifacts/eu/data-act/faq/indirect-access-request-flows.md)

FAQ for Data Act teams handling user and third-party data requests when direct connected-product access is unavailable, incomplete, or limited.

- 12 items

### [EU Data Act Interoperability Standards: Articles 33-36](/artifacts/eu/data-act/faq/interoperability-standards.md)

FAQ on EU Data Act interoperability standards for data spaces, cloud switching, smart contracts, harmonised standards, common specifications, and M/614.

- 12 items

### [EU Data Act Model Terms and Cloud Clauses FAQ](/artifacts/eu/data-act/faq/model-contractual-terms.md)

FAQ on the EU Data Act non-binding model contractual terms for data access and use, cloud switching clauses, B2B use, unfair terms, and evidence.

- 12 items

### [EU Data Act Non-Emergency Public-Sector Request FAQ](/artifacts/eu/data-act/faq/non-emergency-public-sector-requests.md)

FAQ on EU Data Act requests where a public body claims exceptional need outside a public emergency, including scope, request contents, limits, compensation, confidentiality, and evidence.

- 12 items

### [EU Data Act Pre-Contractual Information FAQ](/artifacts/eu/data-act/faq/pre-contractual-information.md)

FAQ on EU Data Act Article 3 pre-contract information for connected products and related services, including data categories, access methods, data holder identity, third-party sharing, and GDPR boundaries.

- 12 items

### [EU Data Act Product Data vs Related-Service Data](/artifacts/eu/data-act/faq/product-data-and-service-data.md)

FAQ explaining how the EU Data Act separates connected product data, related service data, readily available raw and pre-processed data, metadata, and inferred or derived outputs.

- 12 items

### [EU Data Act Public Emergency Request FAQ](/artifacts/eu/data-act/faq/public-emergency-requests.md)

FAQ on EU Data Act public emergency requests: exceptional need, request content, timing, data holder response, compensation, confidentiality, and records.

- 12 items

### [EU Data Act Readily Available Data FAQ](/artifacts/eu/data-act/faq/readily-available-data.md)

FAQ on what counts as readily available data under the EU Data Act, including product data, related service data, metadata, inferred data, and access mechanics.

- 12 items

### [EU Data Act Related Services FAQ](/artifacts/eu/data-act/faq/related-services.md)

FAQ explaining when software is a Data Act related service, how it links to connected products, which product and service data are in scope, and what exclusions apply.

- 12 items

### [EU Data Act Smart Contracts for Data Sharing FAQ](/artifacts/eu/data-act/faq/smart-contracts-for-data-sharing.md)

Answers on Article 36 Data Act smart-contract requirements for data sharing: scope, robustness, access control, termination, archiving, conformity assessment, contract terms, and standards status.

- 12 items

### [EU Data Act Third-Party Data Sharing FAQ](/artifacts/eu/data-act/faq/third-party-data-sharing.md)

FAQ on user-directed third-party data sharing under the EU Data Act, covering data holder duties, recipient limits, trade secrets, security, GDPR, and gatekeepers.

- 12 items

### [EU Data Act Trade Secret Safeguards FAQ](/artifacts/eu/data-act/faq/trade-secrets-safeguards.md)

FAQ on protecting trade secrets when handling EU Data Act user and third-party data access requests, including safeguards, withholding, suspension, refusal, notices, and records.

- 12 items

### [EU Data Act Unfair Contractual Terms FAQ](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)

FAQ on Article 13 of the EU Data Act: B2B unfair contract terms, unilateral take-it-or-leave-it clauses, always-unfair terms, presumed-unfair terms, SMEs, model terms, and review evidence.

- 12 items

### [EU Data Act Users, Data Holders, and Recipients FAQ](/artifacts/eu/data-act/faq/users-data-holders-and-recipients.md)

FAQ explaining Data Act users, data holders, data recipients, connected products, related services, user access, third-party limits, and GDPR boundaries.

- 12 items

### [EU Data Act Vehicle Data Guidance FAQ](/artifacts/eu/data-act/faq/vehicle-data-guidance.md)

FAQ on EU Data Act vehicle data guidance for connected vehicles, aftermarket repair, mobility services, third-party access, trade secrets, security, and GDPR boundaries.

- 12 items

### [EU Data Act: Non-Personal Data and Mixed Datasets](/artifacts/eu/data-act/faq/non-personal-data-and-mixed-datasets.md)

FAQ on how the EU Data Act treats non-personal data, mixed datasets, GDPR precedence, user and third-party access, trade-secret limits, and evidence records.

- 12 items

Browse all indexed questions: [/artifacts/eu/data-act/faq/items](/artifacts/eu/data-act/faq/items.md)

## All FAQ items

*Page 29 of 32. Showing 15 of 470 items.*

### [Which challenge routes can a user or third party use against a trade-secret withholding under the EU Data Act?](/artifacts/eu/data-act/faq/trade-secrets-safeguards.md#which-challenge-routes-can-a-user-or-third-party-use-against-a-trade-secret-withholding-under-the-eu-data-act)

*Module: [EU Data Act Trade Secret Safeguards](/artifacts/eu/data-act/faq/trade-secrets-safeguards.md)*

Under the Data Act, a user or third party that disputes a withholding, suspension, or refusal can take the matter to a competent authority, use the dispute settlement procedure, or seek a judicial remedy, which is why the holder must give written reasons and notify the authority. The safeguard decision has to stand up to that review.

- Provide written reasons so the recipient can use the authority, dispute settlement, or court route.
- Retain the evidence trail so the withholding can be defended on review without disclosing the secret.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Primary legal source for Articles 4 and 5 trade-secret identification, agreed safeguards, withholding or suspension when safeguards are not agreed, implemented, or maintained, the exceptional refusal threshold, challenge routes, and application from 12 September 2025.
- [European Commission - Data Act FAQs v1.4](https://ec.europa.eu/newsroom/dae/redirection/document/108144?ref=sorena.io) - Commission FAQ source for the trade-secret handbrake, including safeguard examples and the limits on withholding, suspension, and refusal.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission overview source for Data Act user access, third-party sharing, trade-secret protection, security limitations, competent-authority notices, and challenge routes.

### [When should a trade-secret safeguard package be reviewed again as products and recipients change under the EU Data Act?](/artifacts/eu/data-act/faq/trade-secrets-safeguards.md#when-should-a-trade-secret-safeguard-package-be-reviewed-again-as-products-and-recipients-change-under-the-eu-data-act)

*Module: [EU Data Act Trade Secret Safeguards](/artifacts/eu/data-act/faq/trade-secrets-safeguards.md)*

Under the Data Act, the safeguard package should be reviewed whenever the protected data, the access path, the recipient, or the available controls change, because each can shift the proportionality balance. A new firmware build, a new export field, or a new third-party recipient can each move the risk picture.

- Review the package when protected fields, the access route, or the recipient set changes.
- Trigger a review after an incident, a complaint, or a dispute settlement outcome.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Primary legal source for Articles 4 and 5 trade-secret identification, agreed safeguards, withholding or suspension when safeguards are not agreed, implemented, or maintained, the exceptional refusal threshold, challenge routes, and application from 12 September 2025.
- [European Commission - Data Act FAQs v1.4](https://ec.europa.eu/newsroom/dae/redirection/document/108144?ref=sorena.io) - Commission FAQ source for the trade-secret handbrake, including safeguard examples and the limits on withholding, suspension, and refusal.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission overview source for Data Act user access, third-party sharing, trade-secret protection, security limitations, competent-authority notices, and challenge routes.

### [What does Article 13 of the EU Data Act do for B2B data contracts?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#what-does-article-13-of-the-eu-data-act-do-for-b2b-data-contracts)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Article 13 protects one enterprise from unfair data-related contract terms unilaterally imposed by another enterprise. The rule covers terms about access to and use of data, and terms about liability and remedies for breach or termination of data-related obligations.

- Use Article 13 for B2B terms about data access, data use, liability, remedies, breach, or termination of data-related obligations.
- Do not treat Article 13 as a general review of every commercial clause; the term must be data-related in the Article 13 sense.
- Record whether the challenged clause was imposed on one enterprise by another and whether it can be severed from the contract.
- Before classifying a clause, check whether it merely reflects a mandatory or default Union-law rule and record why Article 13(2) does or does not apply.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13 defines the B2B unfair-terms rule, the data-related clauses it covers, and the effect that an unfair term is not binding.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer confirms that Chapter IV protects businesses, especially SMEs, from unfair contractual terms related to data sharing.

### [When is a Data Act contract term considered unilaterally imposed?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#when-is-a-data-act-contract-term-considered-unilaterally-imposed)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

A term is treated as unilaterally imposed when one contracting party supplied it and the other party could not influence its content despite trying to negotiate it. This is the practical issue behind take-it-or-leave-it data access and data use clauses.

- Keep the proposed template clause, negotiation comments, redlines, rejection emails, and fallback positions.
- Mark whether the counterparty actually had a realistic chance to change the data-related term.
- For standard templates, distinguish terms that were merely accepted from terms that were genuinely negotiated.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13(6) explains unilateral imposition and places the burden of proving the opposite on the party that supplied the term.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer describes the practical trigger as a stronger party imposing a non-negotiable take-it-or-leave-it term.

### [What is the general unfairness test under Article 13 under the Data Act?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#what-is-the-general-unfairness-test-under-article-13-under-the-data-act)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

The general test is whether the term grossly deviates from good commercial practice in data access and use, contrary to good faith and fair dealing. That test matters for terms not already captured by the Article 13 always-unfair or presumed-unfair examples.

- State the clause text and the data-related obligation it affects.
- Explain the commercial impact on the enterprise that did not supply the term.
- Record whether the clause blocks access, use, remedies, termination, data copies, or reasonable control of generated data.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13(3) states the general unfairness standard based on good commercial practice, good faith, and fair dealing.

### [Which terms are always considered unfair?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#which-terms-are-always-considered-unfair)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Article 13 lists three types of terms that are unfair where their object or effect matches the list. These are the closest equivalent to a black-list review for B2B data contracts.

- Flag any clause that limits the imposing party's liability for intentional acts or gross negligence.
- Flag any clause that removes remedies for non-performance or breach of data-related obligations.
- Flag any clause giving the imposing party sole power to decide whether supplied data conforms to the contract or what a term means.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13(4) identifies terms that are unfair because of their object or effect, including liability exclusions, remedy exclusions, and exclusive interpretation rights.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer summarizes the Data Act's non-exhaustive list of terms always considered unfair.

### [Which terms are presumed to be unfair?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#which-terms-are-presumed-to-be-unfair)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Article 13 also lists terms presumed unfair. The party that imposed one of these terms may try to show that it is not unfair.

- Review remedy caps, liability extensions, data-use rights, termination rights, copy/export rights, notice periods, and unilateral change clauses.
- Pay close attention to commercially sensitive data, trade secrets, and intellectual property rights when the imposing party claims broad access or use rights.
- If the term is only presumed unfair, keep the imposing party's written justification and the reasons it does or does not overcome the presumption.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13(5) lists presumed-unfair terms, including remedy limits, harmful data use, blocked data use, blocked copies, short-notice termination, and unilateral changes.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer confirms that presumed-unfair terms may be defended by the entity that imposed them.

### [Are price and main-subject-matter clauses reviewed under the Data Act unfair-terms rule?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#are-price-and-main-subject-matter-clauses-reviewed-under-the-data-act-unfair-terms-rule)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Article 13 does not apply to terms defining the main subject matter of the contract or to the adequacy of the price as against the data supplied in exchange. Record that exclusion before treating a pricing or core-scope clause as an Article 13 unfair term.

- Separate the main subject matter and price adequacy from surrounding data access, use, remedy, and unilateral-change clauses.
- Do not use the exclusion to ignore a data-related remedy, liability, termination, or unilateral change term.
- Keep the review note short: excluded under Article 13(8), reviewable elsewhere, or not an Article 13 issue.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13(8) excludes main-subject-matter terms and adequacy of price against supplied data from the Article 13 unfairness control.

### [When do the Data Act unfair-terms rules apply to new and older contracts?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#when-do-the-data-act-unfair-terms-rules-apply-to-new-and-older-contracts)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

The Data Act applies from 12 September 2025, and Chapter IV applies to contracts concluded after 12 September 2025. Older contracts concluded on or before 12 September 2025 enter Chapter IV from 12 September 2027 only if they are of indefinite duration or are due to expire at least 10 years from 11 January 2024.

- Record contract signature date, renewal or amendment date, expiry date, and whether the contract is indefinite.
- Flag post-12 September 2025 templates for Article 13 review before signature.
- For older contracts, flag only indefinite-duration contracts and contracts due to expire at least 10 years from 11 January 2024 for the 12 September 2027 Chapter IV review.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 50 sets the Data Act application date and the Chapter IV timing for new and qualifying older contracts.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer confirms that the Data Act applies since 12 September 2025.

### [How do SMEs and larger enterprises fit into the unfair-contract-terms review under the Data Act?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#how-do-smes-and-larger-enterprises-fit-into-the-unfair-contract-terms-review-under-the-data-act)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Chapter IV protects enterprises of every size, with particular relevance for SMEs facing stronger bargaining positions in data-sharing negotiations. Article 13 applies when another enterprise unilaterally imposes a covered unfair term.

- Capture whether the party receiving the term is an SME, but do not assume Article 13 is limited to SMEs.
- Use bargaining position, template control, and negotiation evidence to assess unilateral imposition.
- When an SME receives a take-it-or-leave-it data clause, prioritize review of liability, remedies, data-use restrictions, data-copy rights, termination, and unilateral-change language.

Sources for this answer:

- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer states that Chapter IV protects all businesses, especially SMEs, against unfair terms imposed by stronger players.
- [European Commission - Model contractual terms and cloud SCCs](https://digital-strategy.ec.europa.eu/en/library/draft-recommendation-non-binding-model-contractual-terms-data-access-and-use-and-non-binding?ref=sorena.io) - Commission source says the non-binding model terms were developed to help parties, especially SMEs, implement the Data Act.

### [How should teams use the Commission model contractual terms with Article 13 under the Data Act?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#how-should-teams-use-the-commission-model-contractual-terms-with-article-13-under-the-data-act)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

The Commission model contractual terms are voluntary tools, not a replacement for Article 13. They can help draft Data Act data-sharing contracts and benchmark whether a clause structure is aligned with fair, reasonable, and non-discriminatory rights and obligations.

- Start with the relevant relationship: data holder to user, user to data recipient, data holder to data recipient, or voluntary data sharer to data recipient.
- Document any departure from the model term where the change affects access, use, remedies, liability, termination, compensation, or trade secret protection.
- Do not present model terms as mandatory; keep the Article 13 fairness review separate from the decision to use model wording.

Sources for this answer:

- [European Commission - Model contractual terms and cloud SCCs](https://digital-strategy.ec.europa.eu/en/library/draft-recommendation-non-binding-model-contractual-terms-data-access-and-use-and-non-binding?ref=sorena.io) - Commission source describes the model contractual terms as voluntary and mainly drafted for B2B contracts, with sets for Data Act data-sharing relationships.
- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 41 requires the Commission to develop and recommend non-binding model contractual terms for data access and use.

### [What evidence should a Data Act unfair-terms contract review keep?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#what-evidence-should-a-data-act-unfair-terms-contract-review-keep)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Keep enough evidence to show the clause text, who supplied it, whether the other party tried to negotiate it, the data-related obligation affected, the Article 13 category considered, and the final outcome. The record should let a later reviewer distinguish a negotiated clause from a unilateral template clause.

- Retain clause versions, comments, counterparty objections, internal approvals, and final signed wording.
- Record whether the term was removed, rewritten, justified, severed, or left because Article 13 did not apply.
- Link the review to the contract population so older qualifying agreements can be found without repeating the whole analysis.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 13 makes negotiation history and supplier burden relevant because the party supplying the term must prove it was not unilaterally imposed.
- [European Commission - Model contractual terms and cloud SCCs](https://digital-strategy.ec.europa.eu/en/library/draft-recommendation-non-binding-model-contractual-terms-data-access-and-use-and-non-binding?ref=sorena.io) - Commission source supports using model terms as practical drafting references while preserving voluntary adaptation.

### [Which source records should support an Article 13 review?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#which-source-records-should-support-an-article-13-review)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Keep the legal basis and the decision trail together. For Article 13 work, the record should cite the Data Act source clause, the specific Article 13 paragraph used, the Commission guidance or model-term reference relied on, and the contract version that was reviewed. That makes it clear why a term was treated as unilaterally imposed, always unfair, presumed unfair, or outside the scope of Article 13.

- Keep the cited Data Act article text, the source URL, the review date, and the reviewer or approver.
- Store the clause draft, final wording, and any negotiation evidence together with the implementation artifact.
- Note whether the outcome was removal, severance, rewrite, or no change because the clause fell outside Article 13.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Primary legal source for Article 13 scope, unilateral imposition, always-unfair and presumed-unfair terms, exclusions, severability, Article 41 model terms, and Article 50 timing for new and specified earlier contracts.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer for Chapter IV, including take-it-or-leave-it terms, SME relevance, always-unfair and presumed-unfair examples, and severability.
- [European Commission - Model contractual terms and cloud SCCs](https://digital-strategy.ec.europa.eu/en/library/draft-recommendation-non-binding-model-contractual-terms-data-access-and-use-and-non-binding?ref=sorena.io) - Commission source for voluntary model contractual terms and standard contractual clauses developed to help parties, especially SMEs, implement the Data Act.

### [How should teams assign ownership for Data Act Unfair Contractual Terms implementation work?](/artifacts/eu/data-act/faq/unfair-contractual-terms.md#how-should-teams-assign-ownership-for-data-act-unfair-contractual-terms-implementation-work)

*Module: [EU Data Act Unfair Contractual Terms](/artifacts/eu/data-act/faq/unfair-contractual-terms.md)*

Assign one accountable owner who can change the contract or workflow affected by Article 13. For a Data Act unfair-terms review, that is usually the legal or commercial lead for the contract, with procurement, product, cloud, support, or security teams consulted where their process is affected.

- Name a single accountable owner for each Article 13 action, such as template update, deal review, or process change.
- Record the affected workflow, the evidence artifact, and the review trigger beside the owner.
- List consulted teams separately so accountability stays with the team that can actually make the change.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Primary legal source for Article 13 scope, unilateral imposition, always-unfair and presumed-unfair terms, exclusions, severability, Article 41 model terms, and Article 50 timing for new and specified earlier contracts.
- [European Commission - Data Act explained](https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained?ref=sorena.io) - Commission explainer for Chapter IV, including take-it-or-leave-it terms, SME relevance, always-unfair and presumed-unfair examples, and severability.
- [European Commission - Model contractual terms and cloud SCCs](https://digital-strategy.ec.europa.eu/en/library/draft-recommendation-non-binding-model-contractual-terms-data-access-and-use-and-non-binding?ref=sorena.io) - Commission source for voluntary model contractual terms and standard contractual clauses developed to help parties, especially SMEs, implement the Data Act.

### [Who is a user under the EU Data Act?](/artifacts/eu/data-act/faq/users-data-holders-and-recipients.md#who-is-a-user-under-the-eu-data-act)

*Module: [EU Data Act Users, Data Holders, and Recipients](/artifacts/eu/data-act/faq/users-data-holders-and-recipients.md)*

A user is a natural or legal person that owns a connected product, has temporary contractual rights to use that connected product, or receives a related service. A company can be a user; a consumer can be a user; and more than one person can be a user of the same connected product when ownership, lease, rental, or service rights support that position.

- Check the ownership, rental, lease, user account, and related-service contract before assigning the user role.
- For multi-user products, record which user can access which data and how account-level access is separated.
- A public sector body can also be a user under Chapter II if it owns a connected product, has temporary contractual rights to use it, or receives a related service.

Sources for this answer:

- [Regulation (EU) 2023/2854 (Data Act)](https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng?ref=sorena.io) - Article 2(12) defines the Data Act user role by ownership, temporary contractual use rights, or receipt of related services.
- [European Commission - Data Act FAQs v1.4](https://ec.europa.eu/newsroom/dae/redirection/document/108144?ref=sorena.io) - Questions 14 to 16 explain user status, EU user scope, and multiple-user connected-product scenarios.

## FAQ Pagination

- Canonical index (page 1): [/artifacts/eu/data-act/faq/items](/artifacts/eu/data-act/faq/items.md)
- Page 1 rule: `/page/1` is intentionally not generated; use the canonical index markdown URL.
- Current page: 29 of 32

Pages: [1](/artifacts/eu/data-act/faq/items.md) | [2](/artifacts/eu/data-act/faq/items/page/2.md) | [3](/artifacts/eu/data-act/faq/items/page/3.md) | [4](/artifacts/eu/data-act/faq/items/page/4.md) | [5](/artifacts/eu/data-act/faq/items/page/5.md) | [6](/artifacts/eu/data-act/faq/items/page/6.md) | [7](/artifacts/eu/data-act/faq/items/page/7.md) | [8](/artifacts/eu/data-act/faq/items/page/8.md) | [9](/artifacts/eu/data-act/faq/items/page/9.md) | [10](/artifacts/eu/data-act/faq/items/page/10.md) | [11](/artifacts/eu/data-act/faq/items/page/11.md) | [12](/artifacts/eu/data-act/faq/items/page/12.md) | [13](/artifacts/eu/data-act/faq/items/page/13.md) | [14](/artifacts/eu/data-act/faq/items/page/14.md) | [15](/artifacts/eu/data-act/faq/items/page/15.md) | [16](/artifacts/eu/data-act/faq/items/page/16.md) | [17](/artifacts/eu/data-act/faq/items/page/17.md) | [18](/artifacts/eu/data-act/faq/items/page/18.md) | [19](/artifacts/eu/data-act/faq/items/page/19.md) | [20](/artifacts/eu/data-act/faq/items/page/20.md) | [21](/artifacts/eu/data-act/faq/items/page/21.md) | [22](/artifacts/eu/data-act/faq/items/page/22.md) | [23](/artifacts/eu/data-act/faq/items/page/23.md) | [24](/artifacts/eu/data-act/faq/items/page/24.md) | [25](/artifacts/eu/data-act/faq/items/page/25.md) | [26](/artifacts/eu/data-act/faq/items/page/26.md) | [27](/artifacts/eu/data-act/faq/items/page/27.md) | [28](/artifacts/eu/data-act/faq/items/page/28.md) | [29](/artifacts/eu/data-act/faq/items/page/29.md) | [30](/artifacts/eu/data-act/faq/items/page/30.md) | [31](/artifacts/eu/data-act/faq/items/page/31.md) | [32](/artifacts/eu/data-act/faq/items/page/32.md)

[Previous page](/artifacts/eu/data-act/faq/items/page/28.md) | [Next page](/artifacts/eu/data-act/faq/items/page/30.md)

*Recommended next step*

*Placement: before sources*

## Turn a Data Act FAQ answer into a scoped review

Review one product, dataset, cloud contract, public-sector request, or smart-contract deployment against the cited Data Act source and keep the scope, role, evidence, and unresolved questions together.

- [Open Research Copilot](/solutions/research-copilot.md): Check Data Act scope, GDPR boundaries, cloud switching, and contract questions with cited source outputs.
- [Talk through Data Act implementation](/contact.md): Review one connected product, data-sharing contract, cloud switch, or public-sector request before committing to an implementation path.


---

[Privacy Policy](https://www.sorena.io/privacy.md) | [Terms of Use](https://www.sorena.io/terms-of-use.md) | [DMCA](https://www.sorena.io/dmca.md) | [About Us](https://www.sorena.io/about-us.md)

(c) 2026 Sorena AB (559573-7338). All rights reserved.

Source: https://www.sorena.io/artifacts/eu/data-act/faq/items/page/29.md
