NIS2 Compliance 2025: How to Avoid Fines of Up to EUR 10M [Complete Implementation Guide]
⚠️ The NIS2 deadline passed on October 18, 2024. Non-compliant firms face fines up to EUR 10M. Learn your obligations, deadlines and implementation steps.
Regulations
EU Data Act Takes Effect: The End of the "Digital Prison" for IoT Devices
The EU Data Act has applied since September 12, 2025, giving users control over IoT device data and making it easier to switch cloud providers.
Your Data, Your Business – Now Even in Your Fridge
As of September 12, 2025, the Data Act applies across the European Union. It is the next major regulation after the GDPR to bring order to the digital world. This time it targets the data generated by smart devices, known as the Internet of Things (IoT).
Put simply, if the maker of your smart coffee machine knew more about you than your family did and kept that data to itself, those days are over.
What Does the Data Act Change?
The regulation makes several key changes meant to strengthen the position of consumers and businesses:
- Access to IoT data: Users, both individuals and businesses, will have the right to access the data their own devices generate. They will also be able to share that data easily with third parties. For example, an independent repair shop with no ties to the manufacturer could use it to diagnose a fault in a smart washing machine.
- Easier cloud switching: The Act aims to end the practice of locking customers into a single cloud service. Providers will have to make it easier to migrate data to a competitor and, eventually (from 2027), stop charging for that process. No more digital prison!
- Access for the public sector: In exceptional situations, such as natural disasters or other catastrophes, public authorities will be able to request data from the private sector so they can respond to the crisis more effectively.
Opportunity or Headache?
For users, this is great news: more control, more competition and potentially lower prices for services. For IoT device manufacturers and cloud providers, it is a significant challenge. They have time to adapt their products and services, since the new rules will fully cover devices placed on the market after September 12, 2026.
One thing is certain: the European Union keeps moving toward a digital market where users, not tech giants, call the shots. Time will tell whether this revolution succeeds.
Source: gov.pl
Read also: The NIS2 Directive: New Requirements for Businesses and Cloud Computing in Strategic Sectors: An Analysis.
