The EU Data Act (Regulation (EU) 2023/2854), applicable as of Sept. 12, 2025, introduces a user‑centric access and sharing regime for both personal and non-personal data generated by IoT (Internet of Things) products, with a profound impact on how “data holders” design products, structure contracts, and monetize data. The Data Act shifts control of the data to the user, including the right to use and to commercialize non‑personal data. This is a paradigm change in EU data law with significant implications across business sectors.