3 posts tagged with "Germany"

The EU Data Act has already been directly applicable across the European Union since September 2025.

However, many companies are still asking an important question:

How far have EU Member States actually progressed with national enforcement and implementation structures?

This question is becoming increasingly relevant.

Several countries have now started adopting national laws that define competent authorities, penalties, enforcement pathways, and procedural rules around the EU Data Act.

Germany recently joined this group after the German Bundestag passed its national implementation law.

We analyzed the current implementation status across the European Union.

The map below illustrates the current level of national implementation maturity across the European Union.

On 26 March 2026, the German Bundestag passed the national implementation law for the EU Data Act.

While the EU Data Act itself has already been directly applicable across the European Union since September 2025, Member States are required to establish national enforcement structures, competent authorities, and penalty regimes.

Germany has now taken a major step in that direction.

For manufacturers of connected products, IoT platforms, and digital services, this significantly increases the practical urgency of Data Act compliance.

On 1 December 2025, the German Data Act implementation draft (Bundestag Document 21/2998) was introduced in the German Bundestag. With this national implementation law, the Federal Government defines how the EU Data Actwill be supervised, enforced, and sanctioned in Germany from 2025 onwards.

For the first time, it becomes clear which oversight structures, penalties, documentation requirements, and technical obligations will apply to manufacturers of connected products, IoT providers, and data holders. The draft makes one thing evident: Data Act compliance will become a core element of corporate governance.

Full version only available in German