.webp)
Situation
A multinational provider of connected products and digital services had completed a broader assessment of EU digital regulation and identified the EU Data Act as a priority. Its products operate across multiple European markets and generate telemetry, event information, and operational insights used for service delivery and product improvement.
Following the Data Act’s September 2025 applicability, attention turned to the September 2026 milestone for data-access-by-design requirements affecting connected products and related services. The regulatory direction was clear, but the practical implementation model was not. The organization still needed to determine which products and data were in scope, how users would exercise their rights, and which teams would own each activity.
Nemko Digital helped translate those obligations into a practical operating model spanning governance, contracts, policies, customer request handling, and technical enablement. The goal was not simply to document compliance. It was to establish a proportionate framework that business units could operate and extend without unnecessary complexity.
Challenges
Connected products generate large volumes of information across multiple systems. The organization needed a defensible inventory showing which primary data and relevant metadata were subject to Data Act obligations.
.svg){kind=small}
Technology, legal, compliance, and customer-facing teams all had responsibilities. Without explicit accountability, user validation, communication, data preparation, and delivery could become fragmented.
The Data Act establishes user rights and organizational obligations while leaving room for implementation choices. The organization needed a request-handling model that supported both historical and real-time access without over-engineering for uncertain demand.
Existing customer agreements and internal policies had to be assessed against requirements for data access, data sharing, user rights, party responsibilities, and request handling.
A point-in-time set of documents would not be enough. The framework needed to accommodate new products, changing technology, additional markets, and evolving regulatory expectations.
Key Metrics
The engagement converted broad regulatory requirements into a defined operating model for data access, accountability, and ongoing governance. The organization gained a structured basis for handling requests, coordinating teams, and maintaining evidence of its implementation decisions.
The result was a scalable framework built around six practical implementation questions, a five-stage request journey, three distinct operational layers, and one consolidated compliance documentation package.
Practical implementation questions resolved across data, process, ownership, contracts, technology, and scale
Stages defined in the request journey: authentication, validation, preparation, delivery, and record-keeping
Operational layers aligned across corporate governance, central technology, and local business units
Consolidated Data Act Compliance Documentation Package created for implementation and handover
Download the Full Case Study
Get the complete case study as a PDF for offline reading, sharing with your team, and reference. It includes the full implementation approach, governance model, request journey, documentation package, and key outcomes.