Regulation
Data Act: your new right to switch cloud provider
Being locked in with a cloud provider has long felt like a fact of life. Since September 2025 it no longer is – the EU Data Act gives you the right to take your data and leave, and most small businesses have yet to realise what that means.
The EU Data Regulation (Data Act) has applied since 12 September 2025 and is unusually good news for small businesses: it gives you rights against the cloud giants that you could previously only dream of.
The right to switch cloud service
The core is a ban on lock-in. Cloud service providers (IaaS, PaaS, and SaaS) must now make it practically possible to switch:
- Max 2 months’ notice to start a switch.
- Transition period of 30 days (extendable only if the switch is technically impossible to complete in time).
- Switching fees phased out: the supplier may no longer charge for the switch itself as a business model.
- Your data must be exportable in a usable format.
Are you stuck in an expensive contract with the feeling that moving is impossible? That is exactly what the Data Act is meant to change. European alternatives such as Nextcloud, Hetzner, or Scaleway just became more realistic to switch to.
Data from connected products
The Data Act also gives users the right to data generated by their connected products: machines, vehicles, sensors. If you have a workshop or use connected equipment, the manufacturer must share the data with you (and third parties you appoint). This opens for cheaper service and maintenance outside the manufacturer’s own ecosystem.
What you can do today
- Review your cloud contracts: notice periods and export possibilities must now follow the regulation.
- Ask the supplier how data export works. Vague answers are themselves an answer.
- Factor switchability into new tool choices. We note data export in our procurement checklist.
Which Swedish authority will get supervision is not finally determined at the time of writing (PTS is the likely candidate), but the rights already apply.
So if you are in a cloud or tool contract you have wanted to leave, there is no reason to wait for the authority decision: give notice within the two months the regulation allows, request the export in a usable format, and point to the Data Act if you meet resistance. If you are happy with your supplier, on the other hand, it is enough to weigh switchability the next time the contract comes up for renewal.
Sources
Tools mentioned
Nextcloud
Nextcloud
German platform for files, collaboration, chat and calendar, Europe's great alternative to Google Workspace and Microsoft 365.
- Brings files, chat, calendar and documents together in one platform
- German, can run on own EU servers
- Someone has to run and maintain your own server
Best for: Companies that want control over files and collaboration within the EU.
Hetzner Cloud
Hetzner Online GmbH
German cloud provider known for the industry's lowest prices on VPS and servers, with datacenters in Germany and Finland as well as USA and Singapore. Affordable and GDPR-friendly as long as you choose an EU region, but support is limited and there are no managed AI services; you have to install everything yourself.
- Very low prices (VPS from around SEK 60/month)
- EU datacenters in Germany and Finland, German company under GDPR
- EU storage requires you to pick a German or Finnish region yourself; USA and Singapore are also offered
Best for: Price-sensitive businesses and developers who want cheap EU-based server capacity.
Scaleway
Scaleway (Iliad Group)
French cloud provider with GPU instances and Managed Inference that runs open AI models on European servers. A good sovereign AI alternative, but still a developer platform where you build and operate the solution yourself.
- Managed Inference and GPU with data stored only in the EU
- Transparent hourly and per-token pricing
- Requires technical skills; no ready-made app environment
Best for: Developers and companies that want to run their own AI models or GPU workloads within the EU without American cloud ties.
Related articles
This is general information, not legal advice. See How we review.