2 posts tagged with "Legislation"

Germany's Data Act implementation law is now in force. The Data Act Implementation Act Germany (DADG) was published in the Federal Law Gazette on 29 May 2026 and applies from 30 May 2026.

In the coverage around the German DADG, companies may come across two different authorities: the Federal Network Agency and the BfDI. At first glance, that raises a practical question: if a Data Act issue comes up in Germany, which authority is the right contact?

There is no real contradiction behind this. The Data Act allows Member States to designate more than one competent authority. Germany has now created a model in which the Federal Network Agency is the central authority for large parts of Data Act enforcement Germany, while the BfDI is responsible where the application of the Data Act concerns the protection of personal data.

On 1 December 2025, the German Data Act implementation draft (Bundestag Document 21/2998) was introduced in the German Bundestag. With this national implementation law, the Federal Government defines how the EU Data Actwill be supervised, enforced, and sanctioned in Germany from 2025 onwards.

For the first time, it becomes clear which oversight structures, penalties, documentation requirements, and technical obligations will apply to manufacturers of connected products, IoT providers, and data holders. The draft makes one thing evident: Data Act compliance will become a core element of corporate governance.

Full version only available in German