IAPP Europe Data Protection Congress 2025
BRUSSELS
19-20 November
Triangle of Madness: Data Act’s Contractual Implications on IoT Data Sharing
Thursday, 20 Nov.
13:15 - 14:15 CET
Intermediate level
Malte Beyer-Katzenberger, Team Leader Data Policies, European Commission
Jelena de Lannoy, AIGP, CIPP/E, CIPT, EMEA Privacy Officer, Cisco
Marek Jansen, CIPP/E, AIGP, Director, AI and Privacy Strategy, Volkswagen Group
Thomas Nietsch, CIPP/E, Partner, K&L Gates
Among various other topics and obligations, the EU Data Act will have material impact on the contractual relationships between the different actors in the universe of IoT. The Data Act mandates contractual relationships between each of the involved parties: users of IoT devices, providers of these devices and potential third parties to receive the data. For companies involved in the complex value chain of IoT data, this results in material efforts to put in place and amend existing agreements meeting the requirements laid down by the Data Act. Apart from legal issues, this also raises practical contract management questions, and best practices will need to be established over time. Panelists from different affected parties will discuss legal implications as well as practical experiences on implementation and negotiation of the contractual frameworks, including their first experiences with newly developed standard data sharing templates.
What you will learn:
- Overview and high level of understanding of contractual requirements for sharing IoT data.
- Practical implications deriving from the contractual requirements.
- Firsthand practical experience reports.