4 posts tagged with "Germany"

Germany's Data Act implementation law is now in force. The Data Act Implementation Act Germany (DADG) was published in the Federal Law Gazette on 29 May 2026 and applies from 30 May 2026.

In the coverage around the German DADG, companies may come across two different authorities: the Federal Network Agency and the BfDI. At first glance, that raises a practical question: if a Data Act issue comes up in Germany, which authority is the right contact?

There is no real contradiction behind this. The Data Act allows Member States to designate more than one competent authority. Germany has now created a model in which the Federal Network Agency is the central authority for large parts of Data Act enforcement Germany, while the BfDI is responsible where the application of the Data Act concerns the protection of personal data.

The EU Data Act has already been directly applicable across the European Union since September 2025.

However, many companies are still asking an important question:

How far have EU Member States actually progressed with national enforcement and implementation structures?

This question is becoming increasingly relevant.

Several countries have now started adopting national laws that define competent authorities, penalties, enforcement pathways, and procedural rules around the EU Data Act.

Germany recently joined this group after the German Bundestag passed its national implementation law.

We analyzed the current implementation status across the European Union.

The map below illustrates the current level of national implementation maturity across the European Union.

On 26 March 2026, the German Bundestag passed the national implementation law for the EU Data Act.

While the EU Data Act itself has already been directly applicable across the European Union since September 2025, Member States are required to establish national enforcement structures, competent authorities, and penalty regimes.

Germany has now taken a major step in that direction.

For manufacturers of connected products, IoT platforms, and digital services, this significantly increases the practical urgency of Data Act compliance.

On 1 December 2025, the German Data Act implementation draft (Bundestag Document 21/2998) was introduced in the German Bundestag. With this national implementation law, the Federal Government defines how the EU Data Actwill be supervised, enforced, and sanctioned in Germany from 2025 onwards.

For the first time, it becomes clear which oversight structures, penalties, documentation requirements, and technical obligations will apply to manufacturers of connected products, IoT providers, and data holders. The draft makes one thing evident: Data Act compliance will become a core element of corporate governance.

Full version only available in German