Germany: Act implementing Regulation (EU) 2023/2854 on fair access to and use of data was introduced to Parliament

On 1 December 2025, the Act implementing Regulation (EU) 2023/2854 (the Data Act) was introduced to the Parliament. The Act designates the Federal Network Agency as the principal enforcement authority and establishes national rules on administrative procedure and sanctions. The Act applies to manufacturers and providers of internet-connected products and related services, as well as public bodies requesting access to privately held data. It grants the Federal Network Agency powers to investigate, compel disclosure of information, issue interim orders, and impose penalty payments of up to EUR 500,000, whilst administrative fines for Data Act violations range from EUR 50,000 to EUR 5,000,000, or up to 2% of global annual turnover for the most serious offences committed by large companies. The Federal Commissioner for Data Protection and Freedom of Information is designated as the competent data protection supervisory authority for private-sector matters.