Key Dates for EU Data Act
- 11 January 2024: Regulation entered into force.
- 12 September 2025: Main obligations are now applicable: switching rights, interoperability, transparency.
- 12 January 2027: Switching and egress fees prohibited (except pre-agreed termination penalties).
Why This Matters
The EU Data Act is now fully in effect. It strengthens customer rights to:
- Switch between cloud services within defined timelines
- Obtain clear and usable data exports to ensure business continuity
- Expect balanced B2B data contract terms
- Be protected against unlawful access to EU-held non-personal data by non-EU authorities
Core Obligations Relevant for CLM and SaaS
1. Switching and Portability
- Notice period: Customers may terminate with a maximum of two months’ notice (Article 23).
- Execution window: Providers must complete the switch within 30 days, with extensions allowed only for valid technical reasons (Article 24).
- Scope: Portability includes not only customer data but also configurations, metadata, and digital assets needed for continuity (Article 28).
- Fees: As of today, only direct cost-based charges are permitted. From 12 January 2027, switching fees must be eliminated entirely (Article 29).
Example:
The good news is that it becomes easier to join Precisely if you are using another platform today. You can require a complete export of contracts, templates, and workflows, support to map data from your old system, and a transparent cost breakdown limited to actual switching costs.
2. Fair B2B Data Terms
Standard contract terms must be balanced and proportionate, ensuring that risk and liability are not placed solely on the customer (Articles 34–38).
Example:
Review MSAs to confirm that indemnities, SLAs, and remedies are reciprocal where appropriate, and that termination rights are commercially reasonable.
3. International Access Safeguards (Non-Personal Data)
Providers must assess, document, and where appropriate challenge third-country government requests for access to non-personal data (Article 32).
Example:
When a non-EU authority requests access to system logs stored in the EU, the provider must check legality and proportionality, challenge unlawful requests, and inform the customer where legally permitted.
4. Interoperability Requirements
Providers must document schemas and interfaces and support migration so that operations remain functional after a switch (Article 28).
Example:
During a migration, your provider should supply the schema for your metadata, assist in mapping to the destination system, and allow a short post-termination access window to retrieve any remaining data.
Immediate Actions for Legal, IT & Ops
Precisely’s Compliance Alignment
Summary
The EU Data Act is now a live compliance obligation. For Legal, IT, and Operations teams, this means:
- Enforce switching rights and portability in current contracts
- Ensure data schemas and migration support are available
- Operate a documented process for third-country access requests
- Maintain balanced and defensible B2B contract terms
Precisely is already aligned with these obligations, providing export options, schema documentation, and governance processes so you can stay compliant and maintain operational continuity.
Get Access to our EU Data Act Readiness Plan (complete with contract checklists)
Get access to our full EU Data Act Readiness Plan with contract checklists, technical validation steps, and governance guidance so your Legal, IT, and Ops teams can act with confidence.
<script src="https://js.hsforms.net/forms/embed/8805665.js" defer></script>
<div class="hs-form-frame" data-region="na1" data-form-id="e1b0fe8d-045d-4c31-b9a7-2f0bac46c8fa" data-portal-id="8805665"></div>
