Transport & mobility · Data Act

Transport & mobility — Data Act: opening mobility data

The Data Act promotes access to and sharing of data generated by connected vehicles and mobility services, forming the foundation of multimodal mobility (MaaS) and service innovation. This guide details the access and sharing obligations as applied to mobility.

DPO / CISO team — Data Comply One Updated on 15 June 2026

In brief

  • Regulation: Data Act.
  • Vehicle and mobility equipment manufacturers, connected service operators, and associated data providers are all concerned.
  • Making data accessible.
  • Enable sharing.
  • Design 'by design'.
  • Penalties set by each Member State, effective and dissuasive.

Regulatory deadlines

The key dates of this regulation.

January 2024

Entry into force

In force

September 2025

Application

In force

What is the Data Act about?

The Data Act governs access to data from connected products and services. Mobility is a key domain: vehicles, charging points, connected services. Vehicle data is covered in detail on the 'Automotive' page.

It complements GDPR for personal mobility data.

Is the 'Transport & mobility' sector concerned?

Vehicle and mobility equipment manufacturers, connected service operators, and associated data providers are all in scope. Users and designated third parties benefit from access rights.

The challenge is the development of interoperable multimodal mobility services.

Detailed obligations

Make data accessible

Allow the user to access data generated by the vehicle or the service.

Enable sharing

Making data available to designated third parties (MaaS services).

Design by design

Integrating data access by design.

Ban abusive clauses

Revising mobility services contracts.

Inform

Documenting the data generated and the access modalities.

Sanctions & risks

Sanctions set by each Member State, effective and dissuasive. Data lock-in hinders innovation in multimodal mobility.

Application timeline

  • 1Entry into force. Early 2024.
  • 2Application. Majority of obligations applicable from 12 September 2025.

Common mistakes in the sector

  • 1Locked-down data. Prevent access to mobility data.
  • 2Sharing refused. Block a designated MaaS service.
  • 3Abusive clauses. Retaining unbalanced clauses.
  • 4GDPR confusion. Believing GDPR is sufficient.

Practical case

A mobility operator was not sharing usage data with MaaS platforms. Following user designation, it implements compliant access and sharing, and revises its contracts, promoting interoperability.

Compliance roadmap

  1. 1

    Inventory. Map the mobility data generated.

  2. 2

    Equip. Implement access and sharing mechanisms.

  3. 3

    Design. Embedding access from the design stage.

  4. 4

    Revise. Adapt service contracts.

  5. 5

    Inform. Document the terms.

Frequently asked questions

Yes: the Data Act guarantees access and sharing.

Take action on Data Act

Free assessment or a chat with an expert dedicated to transport & mobility.

They already trust us

See how organisations in the transport & mobility sector secured their compliance with DCO.

See testimonials