Our Data Act Compliance Suite helps organizations implement the new requirements for data access, data use, and data portability in a structured and legally compliant way.

We support you throughout the entire compliance journey—from assessing your data flows and identifying regulatory obligations to designing contractual frameworks and implementing operational measures. Our approach is tailored to your products, business models, and value chains, ensuring practical and efficient compliance with the EU Data Act.

Modul 1

Data Act Quick Check & Scoping Workshop

Overview

A structured initial assessment of your organization's exposure to the EU Data Act, including the identification of relevant data flows, stakeholder roles, and compliance obligations.

Objective

To determine whether and to what extent your products, services, and data fall within the scope of the Data Act and to identify the key requirements applicable to your business.

Scope of Services

Facilitation of an interdisciplinary workshop with relevant stakeholders (e.g., management, product teams, IT, legal/privacy, and sales)
Assessment of your products and services with regard to Data Act applicability
Identification of relevant data categories and data flows
Classification of stakeholder roles (e.g., manufacturer, service provider, user, third party)
Overview of key rights and obligations, including:
- Data access
- Data sharing and disclosure
- Data portability
Discussion of industry-specific considerations and potential exemptions
Initial identification of compliance gaps and implementation priorities

Approach

Workshop-based assessment
Structured analysis and documentation
Practical and business-oriented evaluation

Deliverables

Written Quick Check Report with findings and recommendations
Overview of affected products, services, data categories, and data flows
Assessment of relevant roles and obligations under the Data Act
Prioritized roadmap and action list for achieving Data Act compliance

Modul 2

Contract & Business Model Review (Manufacturers & Users)

Overview

Legal review and optimization of contracts and business models to ensure compliance with the EU Data Act requirements for data access, data sharing, and data use.

Objective

To align contractual frameworks and commercial models with Data Act requirements while balancing regulatory obligations, commercial interests, and operational feasibility.

Scope of Services

Review of existing contracts for Data Act compliance
Development and integration of contractual provisions relating to:
- Data access and data availability
- Data use and sharing with third parties
- Data portability and interoperability
- Rights and obligations of manufacturers, service providers, users, and third parties
Assessment and adaptation of liability, support, maintenance, and software update provisions
Support in the negotiation of data access and data sharing agreements
Advice on commercial compensation models for data access and data use
Review of technical interfaces and API-related contractual considerations
Identification of legal and commercial risks associated with data-driven business models

Approach

Contract review and redlining
Development of modular contractual provisions and template clauses
Practical recommendations tailored to your business model
Optional alignment and review calls with relevant stakeholders

Deliverables

Redlined contract versions incorporating Data Act-compliant provisions
Modular template clauses for manufacturers, service providers, and users
Risk assessment covering data access, data sharing, and data usage rights
Recommendations for adapting commercial and contractual frameworks to the Data Act

Modul 3

Data Act Implementation Support

Overview

Ongoing legal support for the technical and organizational implementation of Data Act requirements across your products, services, processes, and data ecosystems.

Objective

To ensure a consistent, practical, and legally compliant implementation of Data Act obligations within your organization, including governance structures, technical systems, and operational processes.

Scope of Services

Ongoing legal support for internal Data Act implementation projects
Coordination with IT, privacy, compliance, product, and business teams
Assessment of data management frameworks, architectures, and interface concepts
Evaluation of whether specific datasets and data categories fall within the scope of the Data Act
Support in designing and implementing data access, data sharing, and data portability processes
Review of technical specifications and implementation concepts
Legal review of policies, procedures, and supporting documentation
Guidance on regulatory interpretation and implementation decisions throughout the project lifecycle
Support in addressing cross-functional compliance challenges and stakeholder requirements

Approach

Ongoing legal advisory services
Workshops and stakeholder alignment sessions
Participation in project meetings and implementation workstreams
Documented legal assessments and decision memoranda

Deliverables

Continuous legal assessment and implementation guidance
Structured documentation of key decisions and compliance considerations
Legal review of implementation concepts, processes, and documentation
Recommendations for risk mitigation and compliance optimization
Support in demonstrating and maintaining Data Act compliance measures

Modular Data Act Compliance Implementation

Modular Approach

Choose the modules you need for your products, data flows, and business models.

Focus on Data Access and Business Models

Advisory services that go beyond compliance, helping you strategically leverage data as a business asset.

Practical Implementation

From assessment and contract design to operational implementation – tailored to your processes.

Legally sound balance between data access and the protection of legitimate business interests.

Taking data protection, trade secrets, and intellectual property rights into account when designing data access frameworks.

Implement the Data Act in a structured way.

Gain clarity on your data rights and obligations and future-proof your business models.