---
title: "Give users the data from connected · Agent Wranglers"
url: https://agentwranglers.se/playbook/compliance/product-and-data-laws/data-act-connected-products
id: CMP-54
level: Required
applies: devices
region: EU
risk: law
updated: 2026-10-27
build: a2a6bdfed830
tokens: 1148
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Give users the data from connected products

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Product and data laws](https://agentwranglers.se/playbook/compliance/product-and-data-laws.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

- ID: CMP-54
- Level: Required
- Chapter: [Product and data laws](https://agentwranglers.se/playbook/compliance/product-and-data-laws.md)
- Rule: If you make a connected device or the app or service it needs, let users get its data free and machine-readable. Tell them what data it creates before they buy.
- Check: An end-to-end test requests a test device's data and gets every listed data type as JSON or CSV, at no charge. Every product model has a published pre-contract page with data types, continuous generation, storage place and access method.
- Risk: A law broken
- Applies when: The project makes connected devices.
- Region: European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
- How: Chapter II of the Data Act, Regulation (EU) 2023/2854, has applied since 12 September 2025. A connected product collects data about its use and can send it, such as a smart meter or a fitness tracker. A related service is the software a product needs, or software that adds functions to it later. Article 4 asks for readily available data and its metadata on a simple electronic request, free and machine-readable. Products placed on the market after 12 September 2026 must give that access by design, under Article 3(1). Articles 3(2) and 3(3) list the facts due before a contract, such as data types, volume, storage place and retention. Data from products made by micro and small enterprises is excluded, under Article 7. Article 4(4) bans interfaces that make these choices hard. Build the access on the [self-service export](https://agentwranglers.se/playbook/accounts/profile-and-account-lifecycle/self-service-export.md).

## Examples

**Using these examples:** they show one way to follow this rule. Keep the behaviour and the check, not the syntax. Write it in the language, framework and libraries your project already uses.

### YAML example

```yaml
connected_products:
  - model: thermostat-t2
    placed_on_market: 2026-11-02
    data_types: [temperature, setpoint, heating_minutes]
    continuous: true
    storage: remote, retained 24 months
    access: https://example.com/account/device-data
    pre_contract_page: https://example.com/thermostat-t2/data
```

### JavaScript example

```js
export const missingDataTypes = (product, exportedRecords) => {
  const exported = new Set(exportedRecords.map(record => record.type));
  return product.data_types.filter(type => !exported.has(type));
};
```

### Python example

```python
def missing_data_types(product: dict, exported_records: list[dict]) -> list[str]:
    exported = {record["type"] for record in exported_records}
    return [t for t in product["data_types"] if t not in exported]
```

## Sources

- [Data Act Articles 3, 4, 7 and 50](https://eur-lex.europa.eu/eli/reg/2023/2854/oj)

## Related rules

- ACC-55 [Let people export their data themselves](https://agentwranglers.se/playbook/accounts/profile-and-account-lifecycle/self-service-export.md) in Accounts and identity
- IOT-31 [List every sensor and every field that leaves the device](https://agentwranglers.se/playbook/connected-devices/sensor-data-and-privacy/sensor-inventory.md) in Connected devices
- IOT-44 [Let owners read their device's data directly](https://agentwranglers.se/playbook/connected-devices/sensor-data-and-privacy/owner-data-access.md) in Connected devices

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/compliance/product-and-data-laws/data-act-connected-products">Agent Wranglers compliance and governance playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Let cloud customers leave under the Data Act](https://agentwranglers.se/playbook/compliance/product-and-data-laws/data-act-switching.md)
- Next: [Keep the evidence to answer a product liability claim](https://agentwranglers.se/playbook/compliance/product-and-data-laws/product-liability.md)
- [Product and data laws](https://agentwranglers.se/playbook/compliance/product-and-data-laws.md)