Search
Explore digital transformation resources.
Uncover insights, best practises and case studies.
Search
Explore digital transformation resources.
Uncover insights, best practises and case studies.
The EU Data Act changes how industrial IoT data can be accessed and used. Read our article on what this means for your business.
Service
Industry
You own the machine. You run the operations. You generate the data. But until now, accessing that data has often meant navigating vendor-controlled ecosystems. The EU Data Act changes that by giving you, the machine user, the legal right to access and use your data freely. By unlocking access to machine-generated data, the EU Data Act lays the foundation for real-time analytics, enabling smarter and faster decision-making across industrial operations.
In many factories and other industrial facilities, machines quietly generate vast amounts of valuable data. However, accessing this data often requires committing to redundant IT ecosystems. Machine vendors typically prefer to transfer data directly to their own cloud, where it’s bundled with dashboards, predictive tools, and other features. These may duplicate your existing cloud solutions or fail to align with your needs and budget. Even if you only need raw signals, you may be required to commit to the full suite and still face limitations in format, speed, or usability.
That has changed. On Friday, September 12, 2025, the EU Data Act came into effect, marking a shift in the governance of industrial data. The EU Data Act grants you, as the machine user, the legal right to access and use the data your equipment produces, including historical data. This shift isn’t just a regulatory update; it’s a strategic opportunity to rethink how data supports your industrial operations.
In this article, we aim to take a deeper dive into what regulation means for real-time analytics and how to enable end-to-end operational visibility in industry.
The topic and what the EU Data Act means for you in general terms was discussed in our first EU Data Act-related article.
While our original article explores the general rights in greater depth, we find it essential to revisit them briefly here to ensure this article provides complete context.
As defined in regulation, in Chapter II, you have the right to access the data your machines generate — both raw and pre-processed. Vendors must provide it free of charge, via simple request. The data can be, for example, basic data to build an OEE — or quality monitoring and optimization solutions, such as machine start- and stop signals; stop reasons and error codes; production and reject counters; speed, acceleration, and positioning; or temperatures, pressures, flow rates, and other process measurements.
Inferred or enriched data (like AI predictions) is not covered. However, vendors can still offer it as a paid service. Historical data may also be included, if it’s retained and technically accessible. If a vendor’s own service uses it, you can reasonably expect access to the same timeframe. Additionally, from September 12, 2026, all new connected products and services must be designed to ensure this data is directly accessible, secure, free, structured, and machine-readable, as also defined in Chapter II.
Fair contracts (Chapter IV “Unfair contractual terms related to data access and use between enterprises”).
Freedom to switch & interoperability (Chapter VI “Switching between data processing services” and Chapter VIII “Interoperability”).
By unlocking access to machine-generated data, the EU Data Act lays the foundation for real-time analytics, enabling smarter decision-making across industrial operations. However, while real-time data is often highlighted in discussions about industrial analytics, it’s just one dimension of a much broader opportunity. The real transformation enabled by the EU Data Act lies in the ability to access and unify data across multiple machines and systems, regardless of vendor.
In complex industrial environments, such as packaging and palletizing lines in discrete manufacturing industry, a single production line may include a dozen machines from different manufacturers: dosing units, checkweighers, labeling systems, x-ray scanners, vision systems, boxing robots, barcode readers, conveyors, and more. Historically, accessing data from each of these machines has required time-consuming negotiations, custom integrations, and disproportionately expensive machine connectivity licenses.
This dynamic is now changing. By granting machine users the legal right to access the data their equipment produces, the EU Data Act enables companies to systematically collect and combine data from all machines into a unified view. This opens the door to more intelligent monitoring, better control, and agile optimization of entire processes, not just individual components. Thus, the Data Act empowers users to move beyond isolated data silos toward holistic, data-driven operations — including real-time analytics.
When raw data becomes openly accessible, building modern data platforms becomes significantly easier. And when customers want to analyze or enrich that data, it opens the door to new kinds of digital services that go beyond just offering access and deliver insight and impact. By turning raw machine data into real-time insights and actionable intelligence, these capabilities not only improve operational efficiency but also enable faster, smarter decision-making across the board.
For example, at Outokumpu, we helped apply AI to surface defect detection in stainless steel production, enabling real-time quality control.
We also supported their energy efficiency management through a modern integration strategy that unlocked new levels of operational insight.
The EU Data Act signals a fundamental change in the dynamics of industrial data. Instead of locking data behind proprietary walls, it opens the door for machine users to tap into the raw information they need to drive innovation and build competitive advantage with their own data. This shift challenges vendors to rethink their role — not as gatekeepers but as enablers — creating value through services and solutions rather than through control.
However, while the regulation sets a strong foundation, it does not guarantee real-time access or define specific latency requirements. Therefore, it’s highly recommended that you, as an industrial buyer, go beyond written regulations and specify data delivery expectations contractually, such as real-time access, access without additional delay, or access with the same delay as the machine vendor’s own data collection capabilities. By including these terms, you can ensure that the data you receive is not only accessible but also timely and actionable, supporting use cases like predictive maintenance, process optimization, and AI-driven insights.
Looking ahead, new investments should be made with data access in mind. Procurement contracts should explicitly guarantee access to the minimum operational data required for effective monitoring and optimization. This principle is reinforced by Chapter II, Article 3 of the Data Act, which mandates that all connected products and related services placed on the EU market after September 12, 2026, must be designed to ensure that such data — and its metadata — is easily, securely, and freely accessible to users in a structured, machine-readable format, and, where feasible, directly accessible.
Discover how we can help you leverage Microsoft Fabric for real-time, compliant data
Thus, don’t wait for regulations to do the heavy lifting. Treat data access as a legal checkbox and a strategic levexr for agility and competitiveness. Challenge your suppliers. And most importantly, ensure your future investments align with the ideology of openness and interoperability. Because real-time analytics is no longer a luxury — it’s a necessity for operational excellence.
It’s essential to ensure that your machine vendors not only comply with the EU Data Act but also provide data access with minimal delays ideally in real-time or at least with the same latency they themselves use. In our next article, we’ll explore why batch-based data is holding industries back and how timely access can unlock new levels of efficiency.
Cyber exercises must be integrated into our security strategy to truly strengthen cyber resilience. These structured simulations test an organisation’s readiness against real-world cyber threats. They help teams practice incident response, refine decision-making processes, clarify communications channels, assure roles and responsibilities, test assumptions, hone tactics, techniques, and procedures (TTPs), and build confidence in crises.
From critical infrastructure to corporate enterprises, cyber exercising equips teams with the practical experience to respond with clarity and speed. Whether defending national infrastructure or safeguarding sensitive customer data, these exercises transform static response plans into living capabilities.
Key definitions and further reading:
Vendor = data holder, e.g., IoT equipment provided
User = Machine owner, e.g., industrial manufacturer
EU Data Act Explained (Finnish): https://digital-strategy.ec.europa.eu/fi/factpages/data-act-explained
EU Data Act Explained (English): https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained
EU Data Act: https://eur-lex.europa.eu/eli/reg/2023/2854/oj
Tell us how we can help. Our experts will be in touch.