{"id":31088,"date":"2023-09-28T20:49:18","date_gmt":"2023-09-28T18:49:18","guid":{"rendered":"https:\/\/device-insight.com\/2023\/09\/28\/eu-data-act-co-new-legal-foundation-for-data-platforms-and-digital-services\/"},"modified":"2024-06-14T08:40:49","modified_gmt":"2024-06-14T06:40:49","slug":"eu-data-act","status":"publish","type":"post","link":"https:\/\/device-insight.com\/en\/eu-data-act\/","title":{"rendered":"EU Data Act &amp; Co: New legal foundation for data platforms and digital services"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"31088\" class=\"elementor elementor-31088 elementor-31056\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d0d092a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d0d092a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c46e876 blog_col\" data-id=\"c46e876\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-783644d elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"783644d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">EU Data Act &amp; Co: New legal foundation for data platforms and digital services<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d38aa9 elementor-widget elementor-widget-post-info\" data-id=\"4d38aa9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-b86a0c7 elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>2023\/09\/28<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-808e92e elementor-inline-item\" itemprop=\"about\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-terms\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-post-info__terms-list\">\n\t\t\t\t<a href=\"https:\/\/device-insight.com\/category\/news\/\" class=\"elementor-post-info__terms-list-item\">News<\/a>, <a href=\"https:\/\/device-insight.com\/en\/category\/news-en\/\" class=\"elementor-post-info__terms-list-item\">News<\/a>\t\t\t\t<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34dbdea elementor-widget elementor-widget-text-editor\" data-id=\"34dbdea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Anyone involved in the practical implementation of data analytics concepts and the development of data platforms should consider the future legal framework in their data strategy from the outset. We provide an overview of new legislation that is already important today as part of the <a href=\"https:\/\/commission.europa.eu\/strategy-and-policy\/priorities-2019-2024\/europe-fit-digital-age_de\" target=\"_blank\" rel=\"noopener\">EU Digital Strategy<\/a>. Of particular relevance are the Cyber Resilience Act, the EU Data Act, and the Artificial Intelligence Act.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-363348a elementor-section-full_width elementor-section-height-min-height elementor-section-height-default elementor-section-items-middle\" data-id=\"363348a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1854b6c\" data-id=\"1854b6c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e1ef762 elementor-widget elementor-widget-image\" data-id=\"e1ef762\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/device-insight.com\/wp-content\/uploads\/2024\/04\/EU-Gesetze_Datenplattform_AdobeStock_188054130_kleiner.jpg\" title=\"EU-Gesetze_Datenplattform_AdobeStock_188054130_kleiner\" alt=\"EU Fahne bestehend aus Bin\u00e4rcode-Listen\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-196b39f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"196b39f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4058497 blog_col\" data-id=\"4058497\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ac75eb8 elementor-widget elementor-widget-text-editor\" data-id=\"ac75eb8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>If you are considering a data platform based on the Data Lakehouse concept, you should be aware of their implications and consider them in your planning. In essence, these laws emphasize the importance of a holistic and proactive approach to a modern data strategy for several reasons. Complying with them is crucial for efficient risk management, avoiding legal and financial consequences, and safeguarding your reputation. Building a data strategy aligned with these new laws also promotes responsible innovation and can provide a clear competitive advantage in a market where partners and consumers increasingly value data privacy and ethical AI.     <\/p>\n<p style=\"font-weight: 400;\">Particularly relevant are the three EU regulations: the Cyber Resilience Act, the <a href=\"http:\/\/eu-digitalstrategie.de\" target=\"_blank\" rel=\"noopener\">Data Act, and the Artificial Intelligence Act<\/a>. Together, they form a comprehensive framework aimed at addressing the legal challenges arising from the rapid developments in the Internet of Things (IoT). Here&#8217;s an overview: <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3385951 elementor-widget elementor-widget-heading\" data-id=\"3385951\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">EU Cyber Resilience Act:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ec54233 elementor-widget elementor-widget-text-editor\" data-id=\"ec54233\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This law focuses on improving the overall cybersecurity of devices and systems. It is planned to come into effect in 2024, impacting all products in early concept phases or already in development today. The implications include:<\/p><ul><li><strong>Security by design and standards:<\/strong> Companies must integrate data platform security into their strategy from the outset. This includes using encryption, secure authentication, and regular software updates to address vulnerabilities.<\/li><li><strong>Incident Reporting:<\/strong> The law mandates the reporting of cybersecurity incidents. Companies also need response plans for incidents and must promptly rectify issues.<\/li><li><strong>Certification regulations:<\/strong> The law introduces certification systems for IoT devices to attest to compliance with defined security standards. Consider such certifications to demonstrate your commitment to best cybersecurity practices.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-866fb44 elementor-widget elementor-widget-heading\" data-id=\"866fb44\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">EU Data Act:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c8e896 elementor-widget elementor-widget-text-editor\" data-id=\"3c8e896\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The EU Data Act, which came into force at the beginning of 2024 and will become directly applicable law throughout the EU from 12 September 2025, is intended to modernize and harmonize data protection laws within the European Union. Building upon the General Data Protection Regulation (GDPR), it seeks to provide users with control over their personal data and enable them to better understand how their data is used. Clear rules for international data flows and interoperability between different data platforms and formats are intended to foster data trade growth within the EU. It regulates:<\/p><ul><li><strong>Data protection and consent:<\/strong> The law emphasizes the need for explicit user consent before data can be transmitted, collected, and processed. As a company, you must ensure transparency in data usage and provide users with options to control their data.<\/li><li><strong>Data minimization:<\/strong> The law promotes the principle of data minimization, requiring only the collection and storage of as much personal data as absolutely necessary for any given purpose.<\/li><li><strong>Data portability and deletion:<\/strong> Users have the right to request their IoT-generated data to be transferred to another service provider, for example, or to have it deleted. This obliges you to facilitate easy data portability and ensure secure data deletion upon user request.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4111dff elementor-widget elementor-widget-heading\" data-id=\"4111dff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">EU Artificial Intelligence Act:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eeea0d2 elementor-widget elementor-widget-text-editor\" data-id=\"eeea0d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Expected to come into force in 2026, the AI Act aims to regulate AI systems, including those embedded in IoT devices and related platforms. Its key implications for data and security include: <\/p>\n<ul>\n<li><strong>High-risk AI systems:<\/strong> The law has identified \u201chigh-risk\u201d AI systems that warrant special security precautions. Applications such as autonomous vehicles or the management of critical infrastructure may fall into this category. Companies must conduct risk assessments for such AI-powered applications, ensure transparency, and maintain human oversight.  <\/li>\n<li><strong>Transparency and accountability:<\/strong> When using AI systems in your data platform, you must ensure that these systems&#8217; decisions are transparent and explainable to comply with the AI Act&#8217;s requirements.<\/li>\n<li><strong>Security and robustness:<\/strong> The law requires AI systems to be secure and resilient against attacks. IoT devices are often part of interconnected systems susceptible to cyber threats. Therefore, companies must implement security measures to protect both the AI algorithms and the data they utilize.  <\/li>\n<\/ul>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-89470fc elementor-widget elementor-widget-heading\" data-id=\"89470fc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion: Clear advantages of a Lakehouse architecture<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a2d6b2a elementor-widget elementor-widget-text-editor\" data-id=\"a2d6b2a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>These laws will shape data usage and security from various perspectives. While they are set to take effect in the coming years, their impacts and compliance should already be considered in the planning of digital processes. In summary, these laws focus on data management, security, and transparency and are best aligned with existing architectures and products today. One thing is clear: the more unified, secure, and straightforward data systems are organized, the less complex and cumbersome the practical implementation of these new requirements becomes.   <\/p>\n<p>A Lakehouse architecture, such as the one offered by Databricks, can significantly assist in this regard. It allows companies to store, manage, and analyze data in a unified manner by combining data engineering and analytics. Additionally, it provides tools for data governance, quality assurance, or enhanced cybersecurity for your data platform. At Databricks, this solution layer is known as the Unity Catalog \u2013 we&#8217;ll delve deeper into that in part 3 of our blog series.   <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-99788f7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"99788f7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6b6d16ae\" data-id=\"6b6d16ae\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4a0bd885 elementor-widget elementor-widget-heading\" data-id=\"4a0bd885\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">recommended posts<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-15d4ea23 elementor-widget elementor-widget-shortcode\" data-id=\"15d4ea23\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><div class=\"teasers teasers-single-post\"><div class=\"teasers__container\"><div class=\"teasers__single-teaser\"><a class=\"thumbnail-link\" href=\"https:\/\/device-insight.com\/en\/predictive-maintenance-with-ml-ai\/\"><img decoding=\"async\" src=\"https:\/\/device-insight.com\/wp-content\/uploads\/2025\/04\/Blog-Header-11-1024x427.jpg\" alt=\"Image\"><\/a><div class=\"teasers__content\"><div class=\"date__box\"><div class=\"date__box-date\">2025\/04\/25<\/div><a href=\"https:\/\/device-insight.com\/category\/whitepaper\/\" class=\"date__box-button\">Whitepaper<\/a><\/div><h2 class=\"headline\"><a href=\"https:\/\/device-insight.com\/en\/predictive-maintenance-with-ml-ai\/\">Data-Driven Maintenance: Let your machines tell you what they need<\/a><\/h2><div class=\"description\">How Predictive Maintenance Improves OEE in the Data-Driven Factory.<\/div><\/div><\/div><div class=\"teasers__single-teaser\"><a class=\"thumbnail-link\" href=\"https:\/\/device-insight.com\/en\/data-driven-production\/\"><img decoding=\"async\" src=\"https:\/\/device-insight.com\/wp-content\/uploads\/2025\/01\/Blog-Header-8-1024x427.jpg\" alt=\"Image\"><\/a><div class=\"teasers__content\"><div class=\"date__box\"><div class=\"date__box-date\">2025\/03\/06<\/div><a href=\"https:\/\/device-insight.com\/category\/whitepaper\/\" class=\"date__box-button\">Whitepaper<\/a><\/div><h2 class=\"headline\"><a href=\"https:\/\/device-insight.com\/en\/data-driven-production\/\">Why data-driven production is the key to competitiveness<\/a><\/h2><div class=\"description\">How companies benefit from the Data-Driven Factory approach.<\/div><\/div><\/div><div class=\"teasers__single-teaser\"><a class=\"thumbnail-link\" href=\"https:\/\/device-insight.com\/en\/gerolsteiner-data-driven-factory\/\"><img decoding=\"async\" src=\"https:\/\/device-insight.com\/wp-content\/uploads\/2024\/10\/Gerolsteiner_Data-Driven-Factory_Featured.jpg\" alt=\"Image\"><\/a><div class=\"teasers__content\"><div class=\"date__box\"><div class=\"date__box-date\">2024\/10\/30<\/div><a href=\"https:\/\/device-insight.com\/category\/case-studies\/\" class=\"date__box-button\">Case Studies<\/a><\/div><h2 class=\"headline\"><a href=\"https:\/\/device-insight.com\/en\/gerolsteiner-data-driven-factory\/\">Gerolsteiner: How to succeed on the path to the data-driven factory<\/a><\/h2><div class=\"description\">How Gerolsteiner is becoming faster and more flexible with the help of a Data Intelligence Platform.<\/div><\/div><\/div><\/div><\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>How to prepare for the EU&#8217;s upcoming digital legislation.<\/p>\n","protected":false},"author":3,"featured_media":31596,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[27,60],"tags":[165],"class_list":["post-31088","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-news-en","tag-data-lakehouse-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/posts\/31088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/comments?post=31088"}],"version-history":[{"count":26,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/posts\/31088\/revisions"}],"predecessor-version":[{"id":36218,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/posts\/31088\/revisions\/36218"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/media\/31596"}],"wp:attachment":[{"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/media?parent=31088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/categories?post=31088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/device-insight.com\/en\/wp-json\/wp\/v2\/tags?post=31088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}