The new EU Data Act has been of increasing concern for our clients that are active in the SaaS and connected products industries since it entered into force in mid-September. Notably, the EU Data Act is applicable in parallel to the GDPR, and also applies to non-personal data (so-called ‘machine’ or ‘product’ data).
This new EU regulation brings two major implications for the industry:
- Ban on long-term contracts: Typical contract terms of 12 to 24 months will be prohibited, giving all customers a 60-day right to terminate – even for B2B contracts.
- Mandatory migration support: Businesses must actively support the migration to another provider.
Businesses that do not implement these requirements in their contracts may be subject to legal action from competitors and risk extremely heavy fines, comparable to the well-known sanctions under EU data protection law.
Our webinar will cover how SaaS and IoT businesses need to adapt their contracts as well as their business models. It will also explain the criteria used to determine whether the Data Act applies to your business at all, including exceptions for SMEs.
In addition to discussing new compliance risks, the webinar will also explain the opportunities for SaaS businesses under the Data Act in relation to their own cloud infrastructure providers.
When: Thursday 4 December 2025, 2.00-3.00pm
Registration: teams
Speaker: Dr. Lukas Mezger, Rechtsanwalt und Partner, Unverzagt Rechtsanwälte