Looking for an external Data Protection Officer?DATUREX GmbH Dresden
DATUREXData Protection Laws
Data Act — Table of Contents

AI-generated summary

The data-sharing obligations do not apply to micro or small enterprises, and medium enterprises receive a one-year grace period after classification. Startups and small manufacturers are thus shielded from immediate compliance costs, while contractual terms that curtail user rights remain invalid.

Art. 7 Data Act

Scope of business-to-consumer and business-to-business data sharing obligations

(1.)The obligations of this Chapter shall not apply to data generated through the use of connected products manufactured or designed or related services provided by a microenterprise or a small enterprise, provided that that enterprise does not have a partner enterprise or a linked enterprise within the meaning of Article 3 of the Annex to Recommendation 2003/361/EC that does not qualify as a microenterprise or a small enterprise and where the microenterprise and small enterprise is not subcontracted to manufacture or design a connected product or to provide a related service. The same shall apply to data generated through the use of connected products manufactured by or related services provided by an enterprise that has qualified as a medium-sized enterprise under Article 2 of the Annex to Recommendation 2003/361/EC for less than one year and to connected products for one year after the date on which they were placed on the market by a medium-sized enterprise.
(2.)Any contractual term which, to the detriment of the user, excludes the application of, derogates from or varies the effect of the user’s rights under this Chapter shall not be binding on the user.
Source:
EUR-Lex CELEX 32023R2854
Citation:
OJ L 2023/2854, 22.12.2023
As of:
2023-12-22
Retrieved:
2026-04-21