MarketplaceGRCEU Data Act
GRCRegulation

EU Data Act

Regulation on harmonised rules on fair access to and use of data (Data Act)

The Data Act is an EU regulation that aims to establish fair rules for access to and use of data generated by connected devices. It promotes data sharing, safeguards user rights, and prevents unfair practices while supporting innovation and the data economy.

Overview

The Data Act sets out harmonised rules for fair access to and use of data generated by Internet-of-Things (IoT) devices. It ensures that consumers and businesses can access and transfer data while maintaining confidentiality. The regulation introduces measures for improving legal certainty in data-sharing contracts, enabling users to switch between cloud providers, and prohibits unfair contractual terms. It also grants public sector bodies access to certain private sector data in public interest cases like emergencies. The act is cross-sectoral, applying broadly to foster innovation, competition, and sustainability while aligning related legislation with its principles. It comes into force on 11 January 2024 and will be applicable from 12 September 2025.

Related in GRC

GRCStandard

ISO 14001 — ISO 14001:2026 - Environmental management systems

ISO 14001:2026 is the internationally recognized standard for environmental management systems (EMS). It offers a framework for organizations to improve environmental performance through methods including resource optimization, waste management, and stakeholder engagement.

International Organization for Standardization (ISO) • v2026

View details
GRCLaw

SOX — Sarbanes-Oxley Act of 2002

The Sarbanes-Oxley Act (SOX) is a U.S. federal law enacted in 2002 to enhance corporate accountability and financial transparency in response to major corporate scandals. It applies to publicly traded companies, mandating stricter financial reporting, internal controls, and governance standards.

US Government • United States

View details
GRCLaw

AML/CTF Act — Anti-Money Laundering and Counter-Terrorism Financing Act 2006

This is an Australian law established to prevent money laundering and financing of terrorism. It imposes obligations on certain entities to implement anti-money laundering and counter-terrorism financing measures, including customer due diligence, reporting, and record-keeping.

Australian Government • Australia • vCompilation No. 60, 31 March 2026

View details
GRCLaw

AML/CTF Rules — Anti-Money Laundering and Counter-Terrorism Financing Rules 2025

The Anti-Money Laundering and Counter-Terrorism Financing Rules 2025 provide detailed obligations on reporting entities in Australia to prevent financial crimes, including money laundering and terrorism financing. Administered by the Department of Home Affairs, it supports compliance with the Anti-Money Laundering and Counter-Terrorism Financing Act 2006.

Australian Government • Australia • vCompilation No. 1, 31 March 2026

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call