What the EU Data Act means for machine builders

Machine builders supplying customers in the EU will already be aware of the Machinery Directive. Its replacement, the Machine Regulation, comes into force in January 2027 and introduces requirements relating to cybersecurity. However, there is another new piece of European legislation that already has implications for machine builders and system integrators…

02/02/2026 11:32:00

This is Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data – which can be shortened to the ‘Data Act’.

What is covered?
The Data Act has been applied since 12 September 2025, though some aspects do not apply until September 2026 or 2027. It covers ‘connected products’, including products with on-device access, products with wireless connectivity, and products that require a physical connection to be made when needed.

If any data can be accessed by the machine builder, then it is covered by the Data Act. It must therefore be shareable with the end user and, by implication, third parties.

Read the full article in DPA's February 2026 issue