The EU Data Act: What the energy industry needs to know before September 12

On September 12, 2025, the EU Data Act will become fully applicable across the EU.

For energy device manufacturers, platforms, and service providers, this is more than another regulatory deadline. It marks a turning point in how data flows across the energy ecosystem, and how users expect to interact with their devices.

The regulation puts into law what has already been growing for years: the fact that users should be able to control and share the data of their connected devices. For companies building EVs, EV chargers, solar inverters, HVAC, batteries, and the platforms that connect them, the implications are significant.

The Data Act explained in plain language

At its core, the EU Data Act is straightforward:

• If a device generates data, its owner should be able to access it, control it, and decide how it’s used.
• Users must be free to share that data, and delegate control to the providers they choose.
• Manufacturers must provide mechanisms for device owners to easily and securely access, use, and share the generated data.

For energy device manufacturers, the EU Data Act means products must be designed so users can access and share their device data in a standardized, machine-readable format. Manufacturers must implement consent flows that let consumers decide which third parties, such as energy apps or aggregators, can use their data or control their devices. The most effective way to deliver this is through open, secure APIs.

The core principle is simple: data from and control of connected devices should be easily and securely accessed by the device owner, and manufacturers must make transparent, user-driven sharing possible.

Enforcement will be handled by national authorities, with penalties on par with GDPR. Violations that involve personal data could lead to fines of up to €20 million or 4% of global turnover, whichever is higher.

Why it matters for the energy industry

For users, the regulation translates into freedom, flexibility, and better services.

• Users should not be locked into device manufacturer apps or closed ecosystems.
• An EV driver should be able to connect their vehicle to the energy retailer or app that offers the best price or experience.
• A homeowner with solar panels and a battery should be able to use that data with third-party platforms for insights or optimization.

For the industry, this is both a challenge and an opportunity. Manufacturers can choose to lead the shift toward an open energy ecosystem and empower their customers, or risk being left behind as users demand interoperable solutions

A parallel to Open Banking

There’s a useful precedent in finance.

When the Second Payment Services Directive (PSD2) came into force, it required banks to open up customer data via APIs. Initially, it looked like a compliance-heavy regulation. In practice, it enabled what we now call Open Banking.

Companies like Plaid, Tink, and Klarna built on top of standardized banking APIs to create entirely new categories of services: account aggregation, instant payments, personalized budgeting, and frictionless switching. For customers, it meant access to a wide range of new services to manage their finances, instead of being restricted to the limited tools offered by their bank.

The same dynamic is likely to play out in energy. With standardized and accessible APIs, we can expect:

• Dynamic EV charging that automatically shifts to the lowest-cost times.
• Home energy apps that make solar and battery owners more self-sufficient.
• New services that give users more choice and flexibility.

The regulation doesn’t just unlock compliance. It creates space for innovation.

How RED III fits in

The EU Data Act is not the only regulation shaping Europe’s energy future. The Renewable Energy Directive (RED III) also sets new requirements for data access and interoperability.

While the Data Act establishes user-level rights to access and share device data, RED III looks at the system and infrastructure side. It covers how grid operators and national platforms share data to balance demand and supply, and it introduces obligations for charging infrastructure. In particular, it requires smart and bidirectional charging points to support interoperability and transparent data access.

Together, RED III and the Data Act form a bridge:

• RED III focuses on system-level transparency: how grid operators, national platforms, and energy providers share data to balance demand and supply.
• The Data Act focuses on device-level access and portability: how individual users control and share their own data.

They don’t overlap, but they reinforce each other. RED III makes sure the system is ready, while the Data Act makes sure the user is empowered.

Why this moment is different

The energy ecosystem has long been fragmented, with inconsistent standards, closed APIs, and device lock-in. The EU Data Act changes the equation.

Three factors make this moment different:

1. User demand is already here. Consumers expect control over their energy data in the same way they expect it in banking or fitness.
2. The regulation has teeth. GDPR-level fines mean compliance can’t be ignored.
3. The market opportunity is real. Open APIs create the foundation for new services and revenue models, from energy-as-a-service to optimization apps.

This isn’t just a compliance moment. It’s a market moment.

What this means for companies today

Energy device manufacturers and platforms now face a choice:

• Treat the Data Act as a regulatory burden, doing the minimum to comply.
• Or use it as a catalyst to build better user experiences, more attractive products and stronger partnerships.

The companies that move early will:

• Unlock new business models built on open data.
• Gain consumers' trust as they share what is rightfully theirs.
• Position themself as innovative market leaders.
• Integrate faster with leading platforms.

Those who delay risk being left out of the emerging open energy ecosystem.

A shift in perspective

As our Head of Partnerships, Henrik Loennechen, put it:

“The Data Act makes it clear: consumers control their device data. For manufacturers, this isn’t just a regulatory shift but an opportunity to differentiate, build trust, and enable new services through interoperability.”

That’s the mindset shift required to thrive in the open energy era.

Looking ahead

September 12 is approaching fast. The EU Data Act will reshape the way data flows between devices, platforms, and users.

In our next blog, we’ll move from regulation to reality and share our predictions for what’s next: how manufacturers, platforms, and users will adapt once the Data Act is in place.

If you’re interested in how this regulation could affect your business, get in touch; we’d be happy to share our perspective.