Germany: Act implementing Regulation (EU) 2023/2854 on fair access to and use of data was adopted by Parliament

On 26 March 2026, the Act implementing Regulation (EU) 2023/2854 (the Data Act) was adopted by the Parliament. The Act designates the Federal Network Agency as the principal enforcement authority and establishes national rules on administrative procedure and sanctions. The Act applies to manufacturers and providers of internet-connected products and related services, as well as public bodies requesting access to privately held data. It grants the Federal Network Agency powers to investigate, compel disclosure of information, issue interim orders, and impose penalty payments of up to EUR 500,000, whilst administrative fines for Data Act violations range from EUR 50'000 to EUR 5 million or up to 2% of global annual turnover for the most serious offences committed by large companies. The Federal Commissioner for Data Protection and Freedom of Information is designated as the competent data protection supervisory authority for private-sector matters.