Author: Federal Ministry for Digital Affairs and Transport | Source: BMDS Press Release | Publication Date: 29.10.2025 | Summary Reading Time: 3 minutes

Executive Summary

The Federal Cabinet has adopted the Data Act Implementation Act, which provides start-ups and SMEs with better access to device data and enables new AI-based business models. Germany implements EU law without additional national requirements and establishes the Federal Network Agency as the central supervisory authority. Action recommendation: Companies should prepare for expanded data access and develop new service-based business models.

Critical Key Questions

What structural changes could emerge when smart device data becomes massively available to third-party providers?
How much competitive pressure will established tech corporations face due to easier data access for start-ups?
What opportunities arise for German companies if they develop data-based services early – and what risks threaten inaction?

Scenario Analysis: Future Perspectives

Short-term (1 year): Companies begin with compliance implementation and initial data interfaces. First energy-saving apps and household service offerings come to market.

Medium-term (5 years): AI start-ups develop specialized maintenance and optimization services. New platform business models emerge around device data. Cloud provider switching becomes a standard process.

Long-term (10-20 years): Complete data interoperability between IoT devices from different manufacturers. Germany could establish itself as a European data hub and strengthen digital sovereignty.

Core Topic & Context

The Data Act Implementation Act regulates data access from connected devices and creates legal clarity for companies. The law is part of the European strategy for digital sovereignty and data economy promotion.

Key Facts & Figures

Federal Network Agency (BNetzA) becomes the sole supervisory authority for Data Act compliance
Federal Commissioner for Data Protection (BfDI) takes over data protection supervision
1:1 implementation of EU requirements without additional national requirements
Advisory focus instead of sanction-oriented approach to implementation
Automated procedures should increase efficiency
Particularly start-ups and SMEs in the AI sector benefit from expanded data access

Stakeholders & Affected Parties

Direct beneficiaries: Start-ups, SMEs, AI developers, service providers Need for adjustment: IoT device manufacturers, cloud providers, established tech corporations Regulatory authorities: Federal Network Agency, Federal Commissioner for Data Protection

Opportunities & Risks

Opportunities:

New business models through device data access
Market opportunities for start-ups versus tech giants
Innovation boost in AI-based services

Risks:

Data protection challenges with mass data usage
Dependence on EU regulation for future changes
Implementation costs for smaller device manufacturers

Action Relevance

Immediate action required: Companies should develop compliance strategies and plan data interfaces. Particularly relevant for IoT manufacturers and service providers who can develop new data-based business models.

Supplementary Research

The EuroStack Initiative simultaneously shows the efforts of European tech companies toward digital sovereignty. These developments reinforce the trend toward European data ecosystems and could additionally accelerate the impact of the Data Act.

References

Primary source: Data Act Implementation Act - BMDS Press Release

Supplementary sources: EuroStack Initiative - European Tech Giants Found Foundation for Digital Sovereignty

Verification status: ✅ Facts verified on 01.11.2025