When the European Union adopted the Data Act in 2023, Brussels hailed it as a milestone. For the first time, legislation sought not only to protect personal data—as the General Data Protection Regulation (GDPR) did—but to regulate the broader economic use of data itself.
The ambition is undeniable: to give users more control, to force companies to share non-personal data fairly, and to create rules for portability across borders. The Act promises a world in which farmers, drivers, or patients are no longer locked into a single platform but can choose freely among service providers.
For business leaders, this is both opportunity and risk. Opportunity, because the Act lowers barriers to entry for challengers. Risk, because it adds compliance obligations without yet providing a model for Europe to capture value in the global data econom
What the EU Data Act Does: Key Measures at a Glance
• Data Access & Sharing: Users of connected devices (cars, tractors, appliances, wearables) must be able to access the data they generate and share it with third parties.
• Fair Contracting: Prevents unfair contract terms imposed by large platforms on SMEs when it comes to data access.
• Public Sector Use: Allows governments to request private-sector data in emergencies (natural disasters, pandemics).
• Cloud Switching Rules: Obligates providers to enable switching between cloud services more easily, to reduce vendor lock-in.
• International Data Transfers: Introduces safeguards against unlawful transfers to third countries.
These measures matter. They are designed to redistribute power in the digital economy. But from a business perspective, they also raise costs and uncertainties, while leaving Europe without a clear answer to the bigger question: who captures the value?
From Tractors to Teslas: Who Owns the Data?
Consider the modern tractor. Today’s machines generate terabytes of data—soil composition, crop yields, GPS-driven routes. Under the old system, that data was locked inside the manufacturer’s servers, often U.S.-based firms. The Data Act changes that: farmers can now access and share their data.
But what happens next? European startups may benefit, but the bigger play remains abroad. Multinationals can still aggregate that data, process it in foreign data centers, and resell high-margin analytics services back to Europe. Europe provides the “raw data”; others capture the value-added.
The same dynamic plays out in connected cars. Every Tesla or Volkswagen is a rolling data hub, generating streams on speed, location, driver behavior. The Data Act ensures users can share that data. But who develops the AI-driven services on top of it? If cloud and AI providers are outside Europe, the economic upside leaves the continent.
And in healthcare, the stakes are existential. Wearables and medical devices record heart rates, glucose levels, and sleep patterns. Unlocking this data could power breakthroughs in personalized medicine. But without mechanisms to anchor that value in Europe, it risks enriching U.S. and Asian pharma and tech giants instead.
The Global Race: Competing Models
This matters because businesses don’t operate in a vacuum—they compete against models shaped by geopolitics:
• The U.S. model – private platforms dominate, monetizing data with minimal taxation or redistribution.
• The Chinese model – the state treats data as a strategic asset, tightly controlling flows and directing them into national industrial priorities.
• The European model – focused on fairness, openness, and consumer rights.
The EU Data Act strengthens the third model, but fairness alone is not a business strategy. Unless Europe finds ways to monetize its data advantage, its firms will remain disadvantaged—paying compliance costs while global competitors capture value at scale.
Digital Tariffs: A Tool for Competitiveness
Here is where Europe must be bolder. The missing piece is a mechanism to value and tax large-scale data exports—a kind of digital tariff. This is not protectionism. Just as goods crossing borders are subject to customs duties, so too should data flows reflect their value. Properly designed, tariffs would:
• Generate revenue to fund European innovation.
• Create incentives for firms to invest in local AI and cloud capacity.
• Level the playing field between SMEs and global giants.
For businesses, this would mean clarity and predictability. If your company generates or processes European data, you would know that part of its value stays in Europe—whether through investment incentives, infrastructure support, or market development.
The Business Risk of Standing Still
Without such tools, the risk is clear: the Data Act will impose obligations but deliver no competitive advantage.
• Compliance Costs: European SMEs will bear new reporting and data-sharing requirements.
• Asymmetry: Global firms can absorb these costs and still monetize at scale.
• Value Leakage: The most profitable layer—AI-driven insights built on raw data—will still be captured outside Europe.
This is déjà vu. GDPR improved privacy but also entrenched the dominance of tech giants that could afford compliance. If the Data Act follows the same path, Europe’s businesses will once again be regulated into disadvantage.
What Business Leaders Should Demand
The Data Act is not an endpoint but a starting point. Europe’s business community has a vital stake in shaping what comes next. Business leaders should press for:
• Recognition of Data as an Economic Asset – not just a legal right.
• Digital Tariffs or Levies – ensuring that data exports generate returns for Europe’s economy.
• Investment in Local Ecosystems – directing revenues into AI, biotech, and industrial data analytics hubs in Europe.
• Reciprocity in Data Flows – making sure foreign companies that benefit from Europe’s openness are subject to equivalent obligations abroad.
Conclusion: From Guardrails to Growth
The EU Data Act is a landmark. It sets guardrails where none existed, preventing monopolistic lock-in and empowering users. But guardrails do not build highways.
Business leaders must recognize what is at stake. Without sovereignty mechanisms—tariffs, investment funds, reciprocity—the Data Act will be remembered as another regulation that made Europe safer but not stronger.
The choice is stark: Europe can be the supplier of raw digital materials to a world economy shaped elsewhere, or it can build the refineries and industries of the data age. For businesses, this is not just policy—it is competitiveness, market share, and survival.
The Data Act is only the beginning. Whether it becomes the foundation of European digital strength or a footnote in the rise of others depends on whether leaders—political and business alike—are willing to demand more.