Artifact GuideEU

EU Data Act: Fair Access to Connected Product Data and Cloud Switching Scope, Connected Products and Data Types

Clarify what is in scope and how to decide quickly.

This guide supports implementation for EU Data Act: Fair Access to Connected Product Data and Cloud Switching using source grounded analysis and execution oriented recommendations.

Author
Sorena AI
Published
Feb 23, 2026
Updated
Feb 23, 2026
Sections
5

Structured answer sets in this page tree.

Primary sources
3

Cited legal and guidance references.

Publication metadata
Sorena AI
Published Feb 23, 2026
Updated Feb 23, 2026
Overview

Scope is the hardest part of the EU Data Act. Your obligations depend on whether you have a connected product or a related service, and whether the data is product data/related service data that is "readily available" to the data holder. This page gives you a practical classification method, with examples and a scope memo template you can reuse per product line.

Section 1

The four scope terms you must get right (Chapter II)

Chapter II access rights apply to specific kinds of data generated by the use of connected products and related services. The Data Act FAQs summarize the core terms and how they fit together.

Write these definitions into your internal scope memo and tie them to your architecture.

  • Connected product: generates data from use (IoT-style devices and systems)
  • Related service: a digital service linked to a connected product whose behaviour is influenced by data from that product
  • Product data and related service data: data relating to performance/use/environment, and data representing user actions/events during service provision
  • Readily available data: data a data holder can obtain without disproportionate effort going beyond a simple operation
Recommended next step

Use EU Data Act: Fair Access to Connected Product Data and Cloud Switching Scope, Connected Products and Data Types as a cited research workflow

Research Copilot can take EU Data Act: Fair Access to Connected Product Data and Cloud Switching Scope, Connected Products and Data Types from clarifying scope and applicability with cited answers to a reusable workflow inside Sorena. Teams working on EU Data Act: Fair Access to Connected Product Data and Cloud Switching can keep owners, evidence, and next steps aligned without copying this guide into separate documents.

Section 2

What is typically in scope (raw and pre-processed data) vs out of scope (inferred/derived)

In practice, Chapter II is about raw and pre-processed data that exists because of the product's technical design and that the data holder can access without disproportionate effort.

A frequent mistake is treating analytics outputs and business intelligence as mandatory shareable data. The Act and FAQs draw a boundary: inferred/derived data is generally treated differently than raw and pre-processed data.

  • In scope: sensor readings, logs/events, operational metrics, device state, usage events (when readily available)
  • Often out of scope: inferred/derived insights created through complex analysis or enrichment (document your rationale)
  • Pre-contract transparency (Article 3): descriptive information "about" the product can still matter even if it is not product data
Section 3

Personal vs non-personal data (and why GDPR still governs processing)

Users may be entitled to access data whether it is personal or non-personal. But personal data processing remains governed by GDPR rules, including legal basis and data subject rights.

Operationally: build one access pipeline, then apply GDPR checks when personal data is involved (identity, legal basis, redaction where necessary).

  • Design your export so personal and non-personal fields can be handled separately where needed
  • Keep an audit log of access and sharing requests, approvals, and data delivered
  • Document "who is the data subject" vs "who is the user" in B2B scenarios (e.g., fleet/rental)
Section 4

Role mapping: user vs data holder vs data recipient

Scope decisions and obligations depend on roles. A manufacturer is often the data holder, but not always: the Data Act allows the data holder role to be outsourced, and a related service provider can also be the data holder.

Your scope memo should name the data holder(s) and explain how control over readily available data is exercised.

  • User: person/entity using/owning/renting/benefiting from the connected product or related service
  • Data holder: entity that controls access to the readily available data
  • Data recipient/third party: entity receiving data at the user's request (e.g., repair, analytics, maintenance providers)
Section 5

Scope memo template (audit ready output)

Create one scope memo per product line. Keep it short, and link to evidence (architecture diagrams, interface specs, data schemas).

This memo becomes your foundation for contract work, API implementation, and dispute handling.

  • Inventory: connected products + related services in scope; versions; EU market placement model
  • Data classification: product data vs related service data; readily available extraction path; exclusions (inferred/derived)
  • Role mapping: user/data holder/data recipient; outsourced data holder logic if applicable
  • Delivery design: direct access vs portal requests; export formats; security and privacy controls
  • Evidence links: schema registry, API docs, access logs, and test results for exports
Primary sources

References and citations

Related guides

Explore more topics

Access Rights and Portability | EU Data Act: Fair Access to Connected Product Data and Cloud Switching
EU Data Act access rights and portability (Chapter II) made practical: direct vs indirect access, "readily available" data.
Applicability Test | EU Data Act: Connected Products, B2B Data Sharing, B2G Exceptional Need, Cloud Switching
A practical EU Data Act applicability test you can run in 15 minutes: determine if Chapter II IoT access rights apply (connected products + related services).
B2B Data Sharing Contract Clauses | EU Data Act: Mandatory Sharing, Unfair Terms, Trade Secrets
EU Data Act contract clauses for B2B data sharing made practical: clause library for Chapter III access/use (purpose limits, compensation, security.
B2B Data Sharing Contract Template | EU Data Act: Data Access and Use Agreement (Drafting Checklist)
A practical EU Data Act-aligned B2B data sharing contract template: sections, annexes, and drafting checklist for dataset definition, permitted use.
B2G Exceptional Need Requests | EU Data Act: Public Emergency Data Requests, Safeguards, Compensation
EU Data Act Chapter V B2G 'exceptional need' requests made practical.
Cloud Switching and Exit Plans | EU Data Act Chapter VI: Switch Providers, Port Data, Remove Egress Barriers
EU Data Act Chapter VI cloud switching made practical: Article 23 obstacle removal, Article 25 required contract terms (max 2-month notice, 30-day transition.
Cloud Switching Compliance Checklist | EU Data Act Chapter VI: Contracts, Exportable Data, Fees, Transparency
A detailed EU Data Act Chapter VI cloud switching compliance checklist: Article 25 contract terms (max notice period, 30-day transition, retrieval period).
Compliance Program | EU Data Act Implementation Playbook: Governance, Controls, Evidence, Operating Cadence
Turn the EU Data Act into an implementation program: chapter scoping, roles and ownership, product workflows for Chapter II access.
Deadlines and Compliance Calendar | EU Data Act
Plan EU Data Act delivery with real dates: Regulation applies from 12 Sep 2025.
EU Data Act Checklist | Chapter II Access, B2B Sharing, Unfair Terms, B2G Requests, Cloud Switching
A comprehensive EU Data Act checklist organized by roles and chapters: Chapter II connected product data access (direct vs indirect access).
EU Data Act vs GDPR | Differences, Overlap, Portability, Lawful Basis, Implementation Playbook
EU Data Act vs GDPR made practical: how Chapter II access/portability for connected product data differs from GDPR data subject rights.
FAQ | EU Data Act Explained: Key Dates, Access Rights, Trade Secrets, B2G Requests, Cloud Switching
EU Data Act FAQ with practical answers grounded in official sources: when the Data Act applies (Article 50), direct vs indirect access.
Penalties and Fines | EU Data Act Enforcement: Member State Penalties, GDPR-Linked Fines, Risk Controls
EU Data Act penalties and fines made practical: how Member States set penalties (Article 40), the criteria authorities must consider.
Requirements | EU Data Act Obligations Explained: Chapter II Access, Chapter IV Unfair Terms, Chapter V B2G, Chapter VI Switching
A structured EU Data Act requirements breakdown across Chapters II-VI: connected product data transparency and access workflows.
Trade Secrets and Protection | EU Data Act: Confidentiality Measures, Withholding Rules, Evidence Pack
EU Data Act trade secrets protection made practical: how to identify trade secret fields before disclosure, how to agree confidentiality measures (NDAs.