Governs access to and sharing of non-personal data generated by connected products and services in the EU.
32
Rules extracted
221
Obligations decomposed
6.9x
Avg obligations per rule
🇪🇺 European Union
Jurisdiction
The EU Data Act establishes harmonised rules on fair access to and use of data generated by connected products and related services. It addresses data access rights for users of IoT products, obligations for data holders, B2B data sharing, unfair contractual terms, public sector access to privately held data in exceptional circumstances, cloud switching and interoperability, and safeguards against unlawful international governmental access to non-personal data. The regulation entered into force on 11 January 2024 and applies from 12 September 2025.
Source
1
Regulation
Extracted
32
Rules
Decomposed
221
Obligations
Decomposition ratio
Each rule is decomposed into an average of 6.9 atomic obligations — the smallest testable units that can be independently violated.
Fully extracted & scored
All 221 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.
Every obligation in Data Act is scored across independent risk dimensions:
Obligation Weight
How critical within the regulatory framework
Violation Likelihood
How often breached in practice
Enforcement Evidence
Regulator enforcement history and penalties
Cascade Dependency
How many obligations depend on this one
Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for Data Act — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.
High-level commitments and governance framework covering Data Act requirements.
Step-by-step operational procedures to implement each policy commitment.
Ready-to-use forms, registers, and checklists for day-to-day compliance operations.
Combine Data Act with other regulations into a single unified compliance pack for your business.
Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.
Your document is scored against every obligation in Data Act. Each claim is mapped to the obligation tree and evaluated for coverage.
Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.
13 rules, 211 obligations
10 rules, 52 obligations
16 rules, 260 obligations
9 rules, 135 obligations
29 rules, 203 obligations
10 rules, 32 obligations
10 rules, 41 obligations
19 rules, 200 obligations
Upload your document and get a risk-scored gap analysis against 221 Data Act obligations in under 5 minutes.