EU Data Act Access by Design Starts for New Connected Robots

Yesterday, the Cyber Resilience Act activated a 24-hour reporting clock for certain cybersecurity events. Today brings a different milestone for connected robots in Europe: the Data Act “access by design” obligation starts applying to new connected products. This may be more tangible to robot owners than many abstract regulations because it concerns data generated by the device they bought or rented.

What changes on 12 September 2026

The Data Act has generally applied since 12 September 2025. Today’s date concerns the specific design obligation in Article 3(1). Article 50 states that this obligation applies to connected products and related services placed on the market after 12 September 2026.

The rule requires products and services to be designed so product data, related-service data and metadata necessary to interpret and use those data are by default easily, securely and free of charge available in a comprehensive, structured, commonly used and machine-readable format. Where relevant and technically feasible, access should be direct.

Why a robot is a connected product

The Data Act covers products that obtain, generate or collect data about their performance, use or environment and can communicate those data through a network, physical connection or on-device access. That description fits a large share of modern consumer and industrial robotics.

A robot vacuum records maps, errors, operating time and sensor information. A robotic mower generates location, route, battery and system data. A warehouse AMR creates mission, traffic and fault logs. A service robot may collect telemetry, component status and event data. Not every data point will necessarily be treated identically, but robotics is a natural connected-product category.

This does not mean the manufacturer must hand over its AI model

The Data Act does not automatically open all manufacturer intellectual property. The scope focuses on product and related-service data, particularly raw and pre-processed data available to the data holder. Inferred or derived data created through additional analysis can fall outside the core access obligation.

The regulation also contains safeguards for trade secrets, security and personal data. Users do not gain a right to source code, model weights or every internal vendor tool. They do gain a much stronger position regarding data generated by the product they use.

The most interesting effect: service and aftermarket competition

The European Commission has long presented the Data Act as a way to create competition around connected products. If an owner can instruct that data be shared with a chosen third party, an independent repair company, integrator or analytics provider can build a service without total dependence on the manufacturer’s closed cloud.

For robotics, that could mean better diagnostics, predictive maintenance, multi-brand fleet analysis, independent utilization reporting or integration into a customer’s own systems. The value may be especially large in industry, where companies operate equipment from many vendors and need one data view.

What it means for home robots

At home, the most practical data may include faults, component status, operating history, wear and diagnostics. If a product is designed around access by design, the owner should not be trapped in a situation where only the manufacturer can read meaningful telemetry from the device.

That does not mean every new robot vacuum will show a “download all data” button today. Implementation can vary, and access may come through an API, user account or another interface. The interesting editorial work will be comparing how different robot makers actually implement the requirement.

What it means for B2B robots and AMRs

For business customers, the Data Act can change the vendor-lock-in conversation. A warehouse operator buying AMRs should look not only at price and throughput but also at whether it can extract mission, fault, battery, service and utilization data and feed them into its own analytics stack.

The rule may increase pressure for standard formats and interoperability. It will not automatically solve multi-fleet integration, but it gives customers a stronger legal basis for working with data generated by equipment they paid for.

Data Act and CRA: two days, two different obligations

Today’s story should be read together with our guide Cyber Resilience Act Reporting Is Live: 24 Hours for Early Warning. CRA is about cybersecurity and reporting certain events. The Data Act is about data access and the design of new connected products.

Together, however, they show the same direction: European regulation increasingly treats a connected device not as a closed manufacturer-controlled black box but as a product with obligations around security, data, users and the surrounding service ecosystem.

What manufacturers and importers should check

A manufacturer needs to know what data the product generates, which data are accessible, what format can be provided, what metadata are required for interpretation and how trade secrets and personal data are protected. Importers and distributors should verify that non-EU suppliers understand the obligations attached to products sold into Europe.

This is particularly relevant for Asian robotics vendors. A European commercial partner can sell a product effectively, but it cannot retrofit a sound data architecture if the manufacturer never designed export, APIs, documentation and user-request processes into the product.

What remains unknown

The biggest unknown is market practice. The next months will show how robot manufacturers implement access by design, which data they classify as covered and how easy access is in reality. Disputes may focus on the boundary between raw and inferred data, trade secrets and security.

RoboMorrow will therefore not rate brands simply because they claim “Data Act compliant.” The more useful test is concrete functionality: data export, APIs, documentation, service access and the ability to share data with a third party.

RoboMorrow: decyzja

PUBLISH. Consumer angle: your robot generates data, and from 12 September 2026 new connected products in the EU must be designed so users can actually access covered product data. Link directly to the CRA guide as the second regulatory pillar.