The Data Act, effective September 12, 2025, mandates greater data access and sharing for IoT products in the EU, including medical devices. It requires manufacturers to design products for easy, secure data access, impacting how they handle both personal and non-personal data under GDPR. With six months until implementation, businesses should prepare technically and organizationally, updating contracts to comply with new data-sharing requirements.
