The EU Data Act gives users of connected products and related services the right to access and share product/usage data—easily, securely, and free of charge. From Sep 12, 2026, products/services must be designed for access. Before sale, you must explain what data is generated, how often, how users access/erase it, and basic retention. On request, you must provide data in a common, machine-readable format and send it to a third party if the user asks. Guardrails protect trade secrets, ban DMA gatekeepers as recipients in this route, and carve out micro/small business exemptions.