Users can ask for their data. Answer every request in order.
A scope check, a request register and ready-to-edit letters for makers of connected products and providers of related services under the EU Data Act. One offline file.
What the law asks
- Since 12 September 2025: users of connected products and related services have access rights to the data their use generates. The Article 3 access-by-design obligations apply to products placed on the market after 12 September 2026.
- How: where users cannot access the data directly, the data holder makes readily available data accessible without undue delay, free of charge, on a simple request through electronic means. One month is not a statutory deadline.
- Third parties: a user can ask you to make the data available to a third party. A Digital Markets Act gatekeeper is not an eligible third party.
- Trade secrets: you agree proportionate confidentiality measures with the user. Without agreement, or if the user does not implement them, you may withhold or suspend the specific trade secret data, inform the user in writing with reasons and notify the competent authority.
- Exemption: Chapter II does not apply to data from products or related services of micro or small enterprises without partner or linked enterprises outside that size. For medium enterprises it does not apply for one year after placing the product on the market.
What is inside
Scope check
Data holder or not, micro or small exemption, medium enterprise first year. Thresholds per Commission Recommendation 2003/361/EC.
Log each request
Received date, product, data requested, user or third party, simple verification.
Your own target date
Set your internal number of days (default 30). The desk labels it as your target, because the law says "without undue delay". Overdue requests stand out.
Letters
Acknowledgement, minimal verification request, delivery cover note, confidentiality measures proposal, trade secret withholding or refusal, and gatekeeper refusal.
Export
Register as CSV or HTML, full backup as JSON, and import again.
Who it is for
- Medium-sized manufacturers of smart appliances, machines, vehicle parts, wearables and IoT devices
- Sellers and providers of related services who hold product data
- Legal and support teams who answer user data requests
Get the desk
$99 one-time
- One HTML file, works offline in any browser
- No account, no upload, no subscription
You get the file and an invoice within one working day.
Questions
Does it make us compliant?
No tool can promise that. The desk helps you keep requests in order and draft letters. Not legal advice.
Why is the target date our own?
The Data Act says "without undue delay" and does not set a fixed number of days. You choose an internal target that suits your team.
Where is our data stored?
Only in your browser. Export the register to keep a record or share it with your team.
Sources
- Regulation (EU) 2023/2854, EUR-Lex
- Clifford Chance
- Heuking
- Stephenson Harwood
- Nemko Digital webinar report
- William Fry
- Hannes Snellman
- Servitly
- Presencis
- Commission Recommendation 2003/361/EC