SOCIAL NETWORK
Impressum I Datenschutzerklärung
© 2023 Sugrobov+
Germany has officially entered the practical implementation phase of the European Data Act. After the government introduced national enforcement mechanisms in spring 2026, companies operating in the German market now face a new regulatory reality. What was once considered another future EU reform is becoming an immediate compliance issue for businesses.
The new rules are especially relevant for SaaS providers, cloud platforms, IoT companies, digital services, and manufacturers of connected devices. The Data Act is designed to make data access more transparent and competitive across the EU, while increasing obligations for companies that collect, process, or manage user data.
Why the Data Act Matters Right Now
For a long time, many businesses viewed the Data Act as a distant regulatory project. That changed in 2026, when Germany established national supervisory structures and regulators began preparing for enforcement and market oversight.
The main goal of the Data Act is to give users greater control over the data generated by connected products and digital services. Customers should be able to access their data more easily and transfer it between providers without unnecessary restrictions.
For businesses, this means existing processes may no longer be sufficient. Companies are expected to review how they store, share, and manage data, as well as how their contracts define access rights and responsibilities.
The new rules particularly affect:
New Legal Risks for Companies
One of the biggest challenges is the overlap between the Data Act and GDPR requirements. Many companies are still adapting their internal processes to European privacy standards, and the Data Act introduces additional obligations related to data access, portability, and sharing.
Existing commercial agreements may also create legal risks. The new framework changes how rights to data are distributed between service providers, clients, and business partners. Older contract templates may no longer fully comply with EU requirements.
At the same time, Germany is strengthening its compliance and enforcement approach. Regulators are receiving broader supervisory powers, while businesses face increasing risks of penalties, disputes, and contractual conflicts if they fail to adapt.
What Businesses Should Do Now
Companies operating in Germany should not wait for the first inspections or complaints before taking action. In 2026, the Data Act is becoming part of everyday legal and compliance practice across Europe’s digital economy.
Businesses should already begin to:
For technology companies, digital platforms, and cloud providers, the Data Act may become one of the most important compliance topics of the next several years. Businesses that prepare early will reduce legal risks and strengthen their position in the European market.
