IAPP Europe Data Protection Congress 2025

BRUSSELS

19-20 November

Back to conference agenda

Triangle of Madness: Data Act’s Contractual Implications on IoT Data Sharing

Thursday, 20 Nov.

13:15 - 14:15 CET

Intermediate level

BREAKOUT SESSIONPROGRAM MANAGEMENTREGULATORY GUIDANCESTRATEGY AND GOVERNANCE
Download the presentation slides

Malte Beyer-Katzenberger, Team Leader Data Policies, European Commission

Jelena de Lannoy, AIGP, CIPP/E, CIPT, EMEA Privacy Officer, Cisco 

Marek Jansen, CIPP/E, AIGP, Director, AI and Privacy Strategy, Volkswagen Group

Thomas Nietsch, CIPP/E, Partner, K&L Gates

 

Among various other topics and obligations, the EU Data Act will have material impact on the contractual relationships between the different actors in the universe of IoT. The Data Act mandates contractual relationships between each of the involved parties: users of IoT devices, providers of these devices and potential third parties to receive the data. For companies involved in the complex value chain of IoT data, this results in material efforts to put in place and amend existing agreements meeting the requirements laid down by the Data Act. Apart from legal issues, this also raises practical contract management questions, and best practices will need to be established over time. Panelists from different affected parties will discuss legal implications as well as practical experiences on implementation and negotiation of the contractual frameworks, including their first experiences with newly developed standard data sharing templates.

 

What you will learn:

  • Overview and high level of understanding of contractual requirements for sharing IoT data. 
  • Practical implications deriving from the contractual requirements. 
  • Firsthand practical experience reports.