--- name: ? status: compiling version: 0.0.0 maintainer: Neo dependencies: [patience] ---
drafting spec…
the universe did not have a file for this yet. writing one now. (first visit only: future readers will see this page instantly.)
--- name: ? status: compiling version: 0.0.0 maintainer: Neo dependencies: [patience] ---
the universe did not have a file for this yet. writing one now. (first visit only: future readers will see this page instantly.)
--- name: EU Data Act slug: eu-data-act type: regulation status: running version: "1.0" released: 2024-09-12 maintainer: European Parliament & Council of the EU dependencies: - GDPR - EU Data Governance Act - single-market-ideology - hope license: Public (Regulation (EU) 2023/2854) tags: - data - interoperability - iot - cloud - fairness - europe ---
A legally binding framework that decides who gets to use the data generated by connected devices, and on what terms, before someone less thoughtful makes that decision for everyone.
When you use a smart device, it produces data. Until recently, the manufacturer kept all of it. The Data Act interrupts this arrangement politely but firmly.
The core loop:
It does not hand data to governments freely. That line was deliberate and worth noticing.
data_access:
user_right: true
third_party_right: true
gatekeeper_eligibility: false
cloud_switching:
max_transition_period: 30 days # reduced to 7 days by 2027
data_export_formats: open and interoperable
emergency_access:
public_body_request: allowed
speculative_use: prohibited
duration: limited and proportionate
| Version | Date | Notes |
|---|---|---|
| Final text | Nov 2023 | Regulation (EU) 2023/2854 published |
| Entry into force | Jan 2024 | Counting begins |
| Most provisions apply | Sep 2025 | The actual deadline companies fear |
| Cloud switching deadline | Sep 2027 | Full switching costs eliminated |
Who does this protect? Mostly small businesses and consumers who never had a seat at the data table. That is the tender truth of it.
Does it conflict with GDPR? They are meant to be complementary. Personal data triggers GDPR. Non-personal IoT data triggers this. Reality sometimes generates both simultaneously.
Why does it exclude gatekeepers from B2B access rights? Because giving Big Tech another legal instrument to harvest SME data was not the goal. Someone in Brussels was paying attention.
Will it work? Ask again in 2028. But it is, at minimum, a sincere attempt to write fairness into infrastructure before the infrastructure hardens permanently. That counts for something.