From your Smart Watch to the Metaverse: Understanding the Scope of EU IoT Regulation in the Data Act

Petra Sîmpălean; Aurelia Tamò-Larrieux; Konrad Kollnig

doi:10.71265/dtrh7j46

Authors

Petra Sîmpălean University of Maastricht https://orcid.org/0009-0002-3142-4933
Aurelia Tamò-Larrieux University of Lausanne https://orcid.org/0000-0003-3404-7643
Konrad Kollnig University of Maastricht https://orcid.org/0000-0002-7412-8731

DOI:

https://doi.org/10.71265/dtrh7j46

Keywords:

Data Act, Internet of Things, Privacy, Connected Products

Abstract

This article investigates the definitional underpinnings of the EU Data Act (DA), specifically the concepts of “data”, “connected product”, and “related service”, to reveal how they structure the Act’s legal reach and reflect evolving policy priorities. Through analysis of the DA’s legislative journey from Commission proposal to its final form, the article shows how the definitional scope in EU technology regulation is shaped by technological developments, institutional coordination, and stakeholder influence. By tracing these dynamics, the article demonstrates how core definitions serve not simply as technical terms but as strategic instruments for balancing flexibility, legal certainty, and regulatory coherence within the EU’s broader digital governance framework. This article contributes to a better understanding of these strategic terminologies in the DA which in light of current calls within the Omnibus acquis for simplifications of data regulation in the EU has become increasingly relevant.

Downloads

Download data is not yet available.

Author Biographies

Petra Sîmpălean, University of Maastricht

Petra-Francesca Sîmpălean is an LLM European Law (European Business law specialisation) candidate at Maastricht University, the Netherlands.
Aurelia Tamò-Larrieux, University of Lausanne

Dr. Aurelia Tamò-Larrieux is Associate Professor at Faculty of Law, Criminal Sciences and Public Administration at the University of Lausanne, Switzerland.
Konrad Kollnig, University of Maastricht

Dr. Konrad Kollnig is Assistant Professor at the Faculty of Law at Maastricht, University, The Netherlands.

References

‘Decoding the EU Data Act: Data Types Covered by Data Access and Sharing Rights’ https://www.hoganlovells.com/en/publications/decoding-the-eu-data-act-data-types-covered-by-data-access-and-sharing-rights accessed 29 April 2025

‘EU Integrity Watch: Monitor Potential Conflicts of Interests’ https://integritywatch.eu/mepmeetings.php?previousmandate=1&legislature=9 accessed 30 April 2025

‘Nest Learning Thermostat’ (Google Store) https://store.google.com/product/nest_learning_thermostat_3rd_gen?hl=nl accessed 17 April 2025.

‘The EU Data Act Explained: Rights, Obligations and Challenges for Data Holders and Manufacturers’ (26 June 2024) https://diconium.com/en/blog/eu-data-act accessed 29 April 2025

‘The EU Data Act: Part 1 – What Does It Regulate?’ https://www.osborneclarke.com/insights/eu-data-act-part-1-what-does-it-regulate accessed 16 April 2025

ACEA, ‘Latest Compromise on EU Data Act Poses Threat to Auto Industry Competitiveness’ (ACEA, 21 June 2023) https://www.acea.auto/news/latest-compromise-on-eu-data-act-poses-threat-to-auto-industry-competitiveness/ accessed 1 May 2025

ACEA, ‘Position Paper - Proposal for a Data Act’ (ACEA, 16 May 2022) https://www.acea.auto/publication/position-paper-proposal-for-a-data-act/ accessed 1 May 2025

Becker R. and others, ‘Purpose Definition as a Crucial Step for Determining the Legal Basis under the GDPR: Implications for Scientific Research’ (2024) 11 Journal of Law and the Biosciences 1

BusinessEurope, ‘The Proposal for a Data Act - a BusinessEurope Position Paper’ https://www.businesseurope.eu/publications/the-proposal-for-a-data-act-a-businesseurope-position-paper/ accessed 30 April 2025

Casolari F., Buttaboni C. and Floridi L., ‘The EU Data Act in Context: A Legal Assessment’ (2023) 31 International Journal of Law and Information Technology 399

Chiarella M.L. and Borgese M., ‘Data Act: New Rules about Fair Access to and Use of Data’ (2024) 10 Athens Journal of Law 47

Christakis T., ‘“European Digital Sovereignty”: Successfully Navigating Between the “Brussels Effect” and Europe’s Quest for Strategic Autonomy’ (Social Science Research Network, 7 December 2020) ii https://papers.ssrn.com/abstract=3748098 accessed 3 May 2025

CLEPA, ‘Data Act Is Important but Has to Be Complemented Soon by Sector-Specific Legislation on Access to in-Vehicle Data, Functions and Resources’ (CLEPA, 8 November 2022) https://www.clepa.eu/insights-updates/news/data-act-must-be-promptly-complemented-by-a-sector-specific-legislation-on-access-to-in-vehicle-data-functions-and-resources/ accessed 1 May 2025

Coen D., Katsaitis A. and Vannoni M., ‘Business-Government Relations in the EU: Strategy and Complexity’ in David Coen, Alexander Katsaitis and Matia Vannoni (eds), Business Lobbying in the European Union (Oxford University Press 2021)

Commission, ‘A European Strategy for Data’ (Shaping Europe’s Digital Future, 9 April 2025) https://digital-strategy.ec.europa.eu/en/policies/strategy-data accessed 29 April 2025

Commission, ‘Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions (A European Strategy for Data)’ COM (2020) 66 final

Commission, ‘Frequently Asked Questions - Data Act’ (2024) https://digital-strategy.ec.europa.eu/en/library/commission-publishes-frequently-asked-questions-about-data-act accessed 6 May 2025

Commission, ‘Proposal for a Regulation of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)’ COM (2022) 68 final

Committee on Civil Liberties, Justice and Home Affairs, ‘Opinion of the Committee on Civil Liberties, Justice and Home Affairs for the Committee on Industry, Research and Energy on the proposal for a regulation of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)’ https://www.europarl.europa.eu/doceo/document/LIBE-AD-737389_EN.pdf accessed 6 May 2025

Committee on Industry, Research and Energy, ‘Amendments 295 - 569 - Draft Opinion Harmonised Rules on Fair Access to and Use of Data (Data Act)’ https://www.europarl.europa.eu/doceo/document/ITRE-AM-738511_EN.pdf accessed 23 February 2025

Committee on Industry, Research and Energy, ‘Draft Report on the Proposal for a Regulation of the European Parliament and of the Council on Harmonised Rules on Fair Access to and Use of Data (Data Act)’ https://www.europarl.europa.eu/doceo/document/ITRE-PR-732704_EN.html accessed 23 February 2025

Committee on Legal Affairs, ‘Amendments 115 - 473 - Draft opinion Harmonised rules on fair access to and use of data (Data Act)’ https://www.europarl.europa.eu/doceo/document/JURI-AM-738512_EN.pdf accessed 6 May 2025

Committee on the Internal Market and Consumer Protection, ‘Amendments 87 - 286 - Draft Opinion Harmonised Rules on Fair Access to and Use of Data (Data Act)’ https://www.europarl.europa.eu/doceo/document/IMCO-AM-738591_EN.html accessed 23 February 2025

DigitalEurope, ‘Safeguarding Europe’s Economic Competitiveness in the Data Act’s Final Stretch’ https://www.digitaleurope.org/resources/safeguarding-europes-economic-competitiveness-in-the-data-acts-final-stretch/ accessed 30 April 2025

Dinan W., ‘Lobbying Transparency: The Limits of EU Monitory Democracy’ (2021) 9 Politics and Governance 237

European Central Bank, ‘Opinion of the European Central Bank of 5 September 2022 on a proposal for a regulation on harmonised rules on fair access to and use of data (Data Act)’ [2022] OJ C 402

European Commission, ‘Data Act Explained’ (Shaping Europe’s Digital Future, 29 January 2025) https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained accessed 10 April 2025

European Commission, ‘Data Act’ (Shaping Europe’s Digital Future, 2024) https://digital-strategy.ec.europa.eu/en/policies/data-act accessed 3 February 2025

European Commission, ‘Data Governance Act Explained’ (Shaping Europe’s Digital Future, 14 October 2024) https://digital-strategy.ec.europa.eu/en/policies/data-governance-act-explained accessed 10 April 2025

European Court of Auditors, ‘Special Report 05/2024: EU Transparency Register’ https://www.eca.europa.eu/en/publications accessed 6 May 2025

European Economic and Social Committee, ‘Opinion of the European Economic and Social Committee on ‘Proposal for a Regulation of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)’’ [2022] OJ C 365/18

European Parliament, ‘Amendments adopted by the European Parliament on 14 March 2023 on the proposal for a regulation of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)’ [2023] OJ C, C/2023/419

European Parliament, ‘Lobby Groups and Transparency’ https://www.europarl.europa.eu/at-your-service/en/transparency/lobby-groups accessed 8 February 2025

European Parliament, ‘Position of the European Parliament adopted at first reading on 9 November 2023 with a view to the adoption of Regulation (EU) 2023/… of the European Parliament and of the Council on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828 (Data Act)’ https://www.europarl.europa.eu/doceo/document/TC1-COD-2022-0047_EN.pdf accessed 6 May 2025

European Parliament, ‘Provisional agreement resulting from interinstitutional negotiations - Proposal for a regulation of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) (COM(2022)0068 – C9-0051/2022 – 2022/0047(COD))’ https://www.europarl.europa.eu/RegData/commissions/itre/inag/2023/07-14/ITRE_AG(2023)751822_EN.pdf accessed 6 May 2025

Farrell N., ‘Google’s 4th-Gen Nest Learning Thermostat Isn’t Just Pretty (but It’s Also Very Pretty)’ (WIRED, 6 September 2024) https://www.wired.com/review/google-nest-learning-thermostat-4th-gen/ accessed 16 April 2025

FIGIEFA, ‘Data Act: European Mobility Still Needs Sector-Specific Rules’ (FIGIEFA, 18 July 2023) https://www.figiefa.eu/en/2023/data_act_european_mobility_still_needs_sector-speci_c_rules.html accessed 1 May 2025

Frank C. and von Imhoff J., ‘Data Access under the Data Act - A Practical Guidance to More Clarity and Compliance Demonstrated in Three Practice-Oriented Scenarios’ (2024) 25 Computer Law Review International 165

Fyhr K., ‘The Reform of the EU Transparency Register’ (2021) 17 CYELP 177

Groza T. and Botero Arcila B., ‘The New Law of the European Data Markets: Demystifying the European Data Strategy’ (2024) 24 Global Jurist 321

Hennemann M. and others, Data Act: An Introduction (1st edn, Nomos 2024) 46

Hoofnagle C.J., van der Sloot B., and Zuiderveen Borgesius F., ‘The European Union General Data Protection Regulation: What It Is and What It Means’ (2019) 28 Information & Communications Technology Law 65

Leta Jones M., ‘Does Technology Drive Law? The Dilemma of Technological Exceptionalism in Cyberlaw’ (2018) 2 JLTP 101

Middendorp S., ‘Aligning Our Goals with the European Data Strategy’ (Centre of Excellence for Data Sharing & Cloud, 1 June 2020) https://coe-dsc.nl/aligning-our-goals-with-the-european-data-strategy/ accessed 3 May 2025

Mylly U.M., ‘Trade Secrets and the Data Act’ (2024) 55 IIC 368

Parliament and Commission, ‘Agreement between the European Parliament and the European Commission on the establishment of a transparency register for organisations and self-employed individuals engaged in EU policy-making and policy implementation’ [2011] OJ L 191/29

Parliament, Commission and Council, ‘Interinstitutional Agreement of 20 May 2021 between the European Parliament, the Council of the European Union and the European Commission on a mandatory transparency register’ (Interinstitutional Agreement) [2021] OJ L 207/1

Pathak M., ‘Data Governance Redefined: The Evolution of EU Data Regulations from the GDPR to the DMA, DSA, DGA, Data Act and AI Act’ (2024) 10(1) EDPL 43

Purtova N., ‘The Law of Everything. Broad Concept of Personal Data and Future of EU Data Protection Law’ (2018) 10 Law, Innovation and Technology 40

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) [2016] OJ L 119

Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act) (Text with EEA relevance) [2022] OJ L 152

Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828 (Data Act) (Text with EEA relevance) [2023] OJ L 2023/2854

Stuhldreier M.A., ‘Fostering Innovation by Utilising Big Data: The Data Act and the Risk of Quasi-Exclusivity Reinforcing Data Lockups’ in Nadia Naim (ed), Developments in Intellectual Property Strategy: The Impact of Artificial Intelligence, Robotics and New Technologies (Springer International Publishing 2024) 38

Tombal T. and Graf I., ‘Chapter VIII: The European Data Act: A Horizontal Building Block for the Data Economy?’ in B. van der Sloot, G. Monti and F. Bostoen (eds), From Regulating Human Behaviour to Regulating Data (Open press TIU 2025) 134

van Meerbeeck J., ‘The Principle of Legal Certainty in the Case Law of the European Court of Justice: From Certainty to Trust’ (2016) 41 European Law Review 275

von der Leyen U., A Union That Strives for More: My Agenda for Europe: Political Guidelines for the next European Commission 2019 2024 (Publications Office of the European Union, 2019) https://data.europa.eu/doi/10.2775/018127 accessed 1 May 2025