Article
    by Ergin Tuganay, Head of Data & AI, Nortal Finland

    From locked data to live insights: how the EU Data Act transforms industrial analytics

    The EU Data Act changes how industrial IoT data can be accessed and used. Read our article on what this means for your business.

    Service

    Industry Data and AI Manufacturing

    Industry

    Data and AI

    You own the machine. You run the operations. You generate the data. But until now, accessing that data has often meant navigating vendor-controlled ecosystems. The EU Data Act changes that by giving you, the machine user, the legal right to access and use your data freely. By unlocking access to machine-generated data, the EU Data Act lays the foundation for real-time analytics, enabling smarter and faster decision-making across industrial operations.

    Have you ever felt disconnected from the machine data in your own facility? If so, you’re not alone.

    In many factories and other industrial facilities, machines quietly generate vast amounts of valuable data. However, accessing this data often requires committing to redundant IT ecosystems. Machine vendors typically prefer to transfer data directly to their own cloud, where it’s bundled with dashboards, predictive tools, and other features. These may duplicate your existing cloud solutions or fail to align with your needs and budget. Even if you only need raw signals, you may be required to commit to the full suite and still face limitations in format, speed, or usability. 

    That has changed. On Friday, September 12, 2025, the EU Data Act came into effect, marking a shift in the governance of industrial data. The EU Data Act grants you, as the machine user, the legal right to access and use the data your equipment produces, including historical data. This shift isn’t just a regulatory update; it’s a strategic opportunity to rethink how data supports your industrial operations.

    In this article, we aim to take a deeper dive into what regulation means for real-time analytics and how to enable end-to-end operational visibility in industry. 

    Your general rights under the EU Data Act

    While our original article explores the general rights in greater depth, we find it essential to revisit them briefly here to ensure this article provides complete context. 

    Access to your data (Chapter II, “Business to consumer and business to business data sharing”)

    Fair contracts (Chapter IV “Unfair contractual terms related to data access and use between enterprises”).

    Freedom to switch & interoperability (Chapter VI “Switching between data processing services and Chapter VIII “Interoperability”).

    Beyond raw data: enabling end-to-end operational visibility in industry

    By unlocking access to machine-generated data, the EU Data Act lays the foundation for real-time analytics, enabling smarter decision-making across industrial operations. However, while real-time data is often highlighted in discussions about industrial analytics, it’s just one dimension of a much broader opportunity. The real transformation enabled by the EU Data Act lies in the ability to access and unify data across multiple machines and systems, regardless of vendor

    In complex industrial environments, such as packaging and palletizing lines in discrete manufacturing industry, a single production line may include a dozen machines from different manufacturers: dosing units, checkweighers, labeling systems, x-ray scanners, vision systems, boxing robots, barcode readers, conveyors, and more. Historically, accessing data from each of these machines has required time-consuming negotiations, custom integrations, and disproportionately expensive machine connectivity licenses. 

    This dynamic is now changing. By granting machine users the legal right to access the data their equipment produces, the EU Data Act enables companies to systematically collect and combine data from all machines into a unified view. This opens the door to more intelligent monitoring, better control, and agile optimization of entire processes, not just individual components. Thus, the Data Act empowers users to move beyond isolated data silos toward holistic, data-driven operations — including real-time analytics. 

    When raw data becomes openly accessible, building modern data platforms becomes significantly easier. And when customers want to analyze or enrich that data, it opens the door to new kinds of digital services that go beyond just offering access and deliver insight and impact. By turning raw machine data into real-time insights and actionable intelligence, these capabilities not only improve operational efficiency but also enable faster, smarter decision-making across the board.

    For example, at Outokumpu, we helped apply AI to surface defect detection in stainless steel production, enabling real-time quality control. 

    We also supported their energy efficiency management through a modern integration strategy that unlocked new levels of operational insight.

    Make the most of the Data Act opportunities

    The EU Data Act signals a fundamental change in the dynamics of industrial data. Instead of locking data behind proprietary walls, it opens the door for machine users to tap into the raw information they need to drive innovation and build competitive advantage with their own data. This shift challenges vendors to rethink their role — not as gatekeepers but as enablers — creating value through services and solutions rather than through control. 

    However, while the regulation sets a strong foundation, it does not guarantee real-time access or define specific latency requirements. Therefore, it’s highly recommended that you, as an industrial buyer, go beyond written regulations and specify data delivery expectations contractually, such as real-time access, access without additional delay, or access with the same delay as the machine vendor’s own data collection capabilities. By including these terms, you can ensure that the data you receive is not only accessible but also timely and actionable, supporting use cases like predictive maintenance, process optimization, and AI-driven insights. 

    Looking ahead, new investments should be made with data access in mind. Procurement contracts should explicitly guarantee access to the minimum operational data required for effective monitoring and optimization. This principle is reinforced by Chapter II, Article 3 of the Data Act, which mandates that all connected products and related services placed on the EU market after September 12, 2026, must be designed to ensure that such data — and its metadata — is easily, securely, and freely accessible to users in a structured, machine-readable format, and, where feasible, directly accessible. 

    Thus, don’t wait for regulations to do the heavy lifting. Treat data access as a legal checkbox and a strategic levexr for agility and competitiveness. Challenge your suppliers. And most importantly, ensure your future investments align with the ideology of openness and interoperability. Because real-time analytics is no longer a luxury — it’s a necessity for operational excellence. 

    It’s essential to ensure that your machine vendors not only comply with the EU Data Act but also provide data access with minimal delays ideally in real-time or at least with the same latency they themselves use. In our next article, we’ll explore why batch-based data is holding industries back and how timely access can unlock new levels of efficiency. 

    The consequences of human error are costly.  According to IBM’s Cost of a Data Breach Report, businesses lose an average of €3.9 million per breach, with phishing and stolen credentials being the top initial attack vectors. Furthermore, 60% of small and medium-sized businesses go out of business within six months of experiencing a cyberattack. 

    Cyber exercising:
    The cornerstone of
    cyber resilience

    Cyber exercises must be integrated into our security strategy to truly strengthen cyber resilience. These structured simulations test an organisation’s readiness against real-world cyber threats. They help teams practice incident response, refine decision-making processes, clarify communications channels, assure roles and responsibilities, test assumptions, hone tactics, techniques, and procedures (TTPs), and build confidence in crises.

    From critical infrastructure to corporate enterprises, cyber exercising equips teams with the practical experience to respond with clarity and speed. Whether defending national infrastructure or safeguarding sensitive customer data, these exercises transform static response plans into living capabilities. 

    Key definitions and further reading:  

    person holding tablet and industrial machine
    person holding tablet and industrial machine
    person holding tablet and industrial machine
    person holding tablet and industrial machine
    person holding tablet and industrial machine

     

    Explore our white paper and find out how you can be sure you’re taking advantage of the full potential of your industrial data.

     

    Why cyber exercising matters

    • Reveals critical gaps in technical controls, escalation paths, and decision-making workflows.
    • Fosters organisation-wide collaboration, improving coordaination and communication across all roles, functions, and levels. Builds confidence under pressure, giving participants, groups, and organisations muscle memory they can rely on.
    • Exposes participants to real-world attack techniques, improving detection, containment, and familiarity.
    • Strengthens regulatory and stakeholder alignment by stress-testing notification and reporting procedures in a simulated environment.
    • Fosters a culture of continuous improvement by turning lessons from exercises into actionable changes across people, processes, and technologies. 

    Talk to our industry experts

    Tell us how we can help. Our experts will be in touch.