Access by Design: new EU data rules are good news for consumers in Ireland

• New rules take effect from 12 September 2026
• Consumers and business users to have direct access to data from connected products and services
• Smart watches, cars, medical devices, industrial machinery and more covered by new rules

From Saturday 12 September, a new access by design requirement will apply to connected products and related services placed on the EU market, making it easier for users to access their own data. 

Connected products include items that collect or generate data about their use, performance or environment and can communicate that data electronically. Examples include smart watches, medical devices, smart home devices (e.g. smart thermostats), industrial machinery and many cars and trucks. The rules also apply to the digital services connected to those products, such as companion apps, remote monitoring services or software services that support the product’s functionality.

The change is good news for consumers and businesses that use connected products, who will now have direct access to the data they generate. Users will also be able to share their data with third parties like repair and maintenance services. 

Requirements for manufacturers and service providers

The new requirements are part of the EU Data Act, which aims to give consumers and businesses greater control over data generated by connected products. They apply to connected products and related services that are placed on the EU market from 12 September 2026 onwards.

Manufacturers and service providers will need to design products and services so that users can access relevant data directly by default, where technically feasible. Users must be able to access or export data – through a built-in interface, app or other technical tool, for example – without having to request access from the data holder.

Previous rules: access by request

Under existing rules, manufacturers and providers of related services must make relevant data available to users on request. This means that if a user wants access to their data, they must first request it from the data holder. The new rules will give users direct access to their data without having to request it.

The CCPC has published information on the EU Data Act for businesses and consumers.