by Streamlex 12 September 2025
On 12 September 2025, the European Commission published official guidance to support the implementation of the Data Act in the automotive sector. The guidance is specifically tailored to Chapter II of the Data Act, which governs Business-to-Consumer (B2C) and Business-to-Business (B2B) data sharing. The goal is to clarify how vehicle data should be handled by original equipment manufacturers (OEMs), service providers, and insurers, and to outline the types of data that fall under the scope of the Data Act.
The Guidance on vehicle data, accompanying Regulation 2023/2854 (Data Act) applies exclusively to stakeholders in the automotive value chain:
It does not extend to other sectors or the public sector.
The guidance applies to vehicles that constitute "connected products" under the Data Act. It is understood as essentially a vehicle that collects data about its usage or environment and transmits it electronically.
A ‘connected product’ is ‘an item that obtains, generates or collects data concerning its use or environment and that is able to communicate product data via an electronic communications service, physical connection or on-device access, and whose primary function is not the storing, processing or transmission of data on behalf of any party other than the user’ (DA Article 2(5)).
A "connected service" (vehicle-related service) refers to a bi-directional data exchange between the vehicle and the service provider, whether it be the OEM or a third party, that affects the vehicle’s operation or behaviour. Exampled of vehicle-related services:
This guidance relates to vehicle data, which is understood as:
The guidance classifies this data into three categories outlined below. Only raw data and pre-processed data falls within the scope of the Data Act, inferred and derived data does not.
Raw Data: Raw data are data which are not substantially modified. They are also known as source or primary data. They refer to data points that are automatically generated without any further form of data processing.
Pre-Processed Data: Data refined for usability but still reflective of real-world conditions. Pre-processed data are not ‘new’ information, it still reflects real-world events or conditions as captured by vehicle sensors or systems (e.g. temperature, speed, acceleration, position). The content or meaning of the source data is unchanged and has merely been prepared or refined for future use.
Inferred or Derived Data: Created via proprietary algorithms or advanced analysis. Predictions of future events, values or conditions are usually considered out of scope as they typically provide ‘new’ information that goes beyond the description and characterization of the current vehicle operation or status.
The Data Act grants users the right to access and share vehicle data, either directly or indirectly:
If access is granted through the vehicle’s OBD-II port, the user cannot be required to buy special tools or have technical expertise.
The Data Act only applies to data that is technically retrievable.
This excludes, for example, data which are processed ‘on the edge’ (i.e. inside the vehicle) and cannot be accessed by any party, including OEMs, as they are immediately deleted after processing. Certain data points such as accelerometer data, vehicle speed, GNSS-based location or odometer value are essential for many aftermarket use-cases. Therefore, OEMs are encouraged to consider the importance of data points for independent aftermarket service providers when they decide whether to design such data points to be retrievable from the vehicle. (para 45 of the Guidance)
Under Data Act Article 5, OEMs must share relevant data with third-party service providers when requested.
Manufacturers must share raw and pre-processed data that is technically retrievable and not derived through proprietary algorithms.
Yes—if the data is designed to be directly accessible and it's technically feasible. Otherwise, OEMs must provide indirect access.
No. These fall under "inferred or derived data" and are out of scope for mandatory data sharing.