The EU Data Act: What changes for cloud & SaaS switching (egress fees, timelines)?

From September 12, 2025, new data processing service contracts (IaaS/PaaS/SaaS) must include a switching package: max 60-day notice, then a 30-day transition to port data/assets (extendable once), followed by ≥30 days for final retrieval, and complete erasure after. Switching charges (incl. egress fees) phase down to cost-based only until January 11, 2027, and are banned from January 12, 2027 (with a narrow multi-cloud exception). Providers must help customers reach functional equivalence on another like-for-like service and publish registers of formats/standards and relevant interfaces.

Contract mandates (what must be in your terms)

  • Notice → Transition → Retrieval → Erasure sequence with the minimum durations above.

  • Functional equivalence support (reasonable assistance to achieve comparable functionality on a similar service).

  • Transparency: Public register of formats/standards and open interfaces where applicable.

The end of switching charges

  • Now → Jan 11, 2027: Only reduced, cost-based charges allowed for switching, including egress.

  • From Jan 12, 2027: All switching charges banned for exits.

  • Multi-cloud exception: Cost-based charges may apply for ongoing parallel multi-cloud use (not a one-off switch).

Action playbooks

Buyers (customers)

  • Update your MSA with the switching package (≤60-day notice, 30-day transition, ≥30-day retrieval, erasure).

  • Demand any pre-2027 charges are itemized and separate from service fees/ETPs.

  • Red flags to strike: egress after 2027, short retrieval/transition windows, >60-day notice.

Providers (vendors)

  • Add the mandatory switching package to standard terms and price books.

  • Publish your formats/standards register and a transparency page for third-country access safeguards.

  • Build a runbook and test the 30-day port + 30-day retrieval process; define the scope of “functional equivalence” help.

30-60-90 day rollout

  • 0–30d: Contract sweep; kill non-compliant egress clauses.

  • 31–60d: Ship a self-serve export and publish your registers.

  • 61–90d: Tabletop a full switch; finalize a trade-secret handling playbook.

Definitions

  • Data processing services: IaaS, PaaS, SaaS.

  • Functional equivalence: Reasonable help so the customer can achieve comparable outcomes on a similar service.

  • Switching charges: Fees tied to leaving (e.g., data egress, porting).

Next
Next

The EU Data Act: What must connected-product makers and IoT services let users access?