Marcus Czempinski

On 26 March 2026, the Bundestag passed the Act Implementing the Data Regulation (DADG), which was published in the Federal Law Gazette on 29 May. Germany has thus – albeit with a significant delay – established the national legal framework required of Member States under the EU Data Act. Below, we provide an overview of the background, content and penalty provisions of the new Act.

The Data Act harbours many ambiguities. We have collected and answered the most frequently asked questions about the Data Act from presentations and client work. Is your question not included? Then please get in touch with us!

Are we covered by the Data Act? In case of doubt, yes. As soon as you are a manufacturer of connected products or a provider of connected services and place them on the market in the EU, you are generally covered by the Data Act.

The transfer of data across international borders is essential for many companies in the digitalized world but poses significant regulatory challenges, particularly in the EU.

On 1 September 2023, the new Federal Act on Data Protection (Data Protection Act, FADP; RO 2022 491) will enter into force. The total revision of the FADP is intended, among other things, to strengthen the rights of data subjects. The planned revision is intended to give individuals more control over their data and ensure that companies deal transparently and responsibly with acquired data.

The most important facts about the new agreement on data transfers between the EU and the US

The European Union (EU) has recently adopted regulations in the digital field and is actively working on new ones. From the Digital Services Act (DSA) and Digital Markets Act (DMA) to the AI Act, freshly passed by the Parliament, important changes in the EU area are on the horizon.

Daten als Währung - wie die EU Warenkaufrichtlinie und die EU Richtlinie über Digitale Inhalte und Dienstleistungen Datenschutz und Datennutzung vereinbaren sollen und welche Möglichkeiten sich daraus für die Schweiz ergeben.

The European Data Protection Board (EDSA) issues annual guidelines on the implementation and handling of the GDPR. These guidelines are binding for all member states and serve to ensure the uniform application of data protection regulations throughout the European Union.