Skip to main content van Berings

Insights

trade&compliance

The EU Data Act: Navigating the Intersection of Data Sharing and Trade Secret Protection

​The digital transformation sweeping across industries has positioned data as a critical asset, driving innovation and competitive advantage. In this context, the EU Data Act, set to take effect in September 2025, has significant implications for businesses, particularly regarding the delicate balance between data sharing and the protection of trade secrets.

Introduction

The Data Act aims to foster a robust data economy by promoting fair and efficient data sharing practices. While this initiative offers numerous benefits, such as increased innovation and competition, it also raises concerns for businesses that possess valuable data containing trade secrets. This article delves into the key provisions of the Data Act, explores the potential conflicts between data sharing obligations and trade secret protection, and provides recommendations for businesses to navigate this complex landscape.

Trade Secrets in the Data Act: Balancing Accessibility and Protection

The Data Act grants users of connected devices the right to access and share data generated by those devices. This raises concerns for original equipment manufacturers (OEMs) who fear that competitors could exploit this data to develop rival products or gain an unfair market advantage. The Act attempts to address these concerns by allowing data holders to refuse data sharing requests under certain circumstances, particularly when it involves disclosing trade secrets. However, these exceptions are limited, and the Act's provisions on trade secrets remain ambiguous, potentially leading to legal challenges and disputes.

Understanding Trade Secrets

Trade secrets encompass a wide range of confidential information that provides a business with a competitive edge. This can include formulas, practices, designs, instruments, or a compilation of information. To qualify as a trade secret, the information must not be generally known or readily ascertainable, have commercial value because it is secret, and be subject to reasonable steps taken by the rightful holder to maintain its secrecy.

The Act's Treatment of Trade Secrets

The EU Data Act acknowledges the importance of protecting trade secrets while promoting data sharing. It stipulates that trade secrets should be disclosed to third parties only to the extent necessary to fulfill the purpose agreed between the user and the third party. Data holders are entitled to agree on proportionate technical and organizational measures to protect their proprietary information, such as:

  • Model Contractual Terms
  • Confidentiality Agreements
  • Strict Access Protocols
  • Technical Standards
  • Codes of Conduct

If the parties cannot agree on such measures, the trade secrets may be withheld. Additionally, in exceptional circumstances where disclosure would likely cause serious economic damage to the trade secret holder, they can refuse to disclose the information, even if the aforementioned measures are in place.

Potential Challenges

Despite these provisions, several challenges may arise for businesses seeking to protect their trade secrets in the context of the Data Act:

  • Defining Trade Secrets: The Act's definition of trade secrets is not explicitly precise, leaving room for interpretation and potential disputes over what constitutes a trade secret.
  • Demonstrating Harm: Data holders must demonstrate that disclosing trade secrets would cause "serious economic damage," which can be difficult to prove in practice.
  • Balancing Competing Interests: The Act aims to balance the interests of data holders and data users, which may lead to conflicts and uncertainties in its implementation.
  • Enforcing Protection: Enforcing trade secret protection in the context of data sharing can be challenging, especially when dealing with cross-border data flows.





Latest Insights

How AI Can Strengthen Cybersecurity Culture

​In an increasingly digital and interconnected business landscape, cybersecurity has become a strategic priority for organizations worldwide. The growing sophistication of cyber threats, combined with stricter regulatory frameworks, has led companies to seek innovative solutions to protect their data and infrastructure. In this context, artificial intelligence is emerging as a transformative force, enabling businesses to strengthen their cybersecurity culture and enhance their defense capabilities proactively.

The Importance of Due Diligence in the Art Trade

​​In the context of the art trade, Due Diligence plays a crucial role in protecting the interests of buyers, sellers, and industry players, including galleries, auction houses, and investment firms. In a complex and ever-evolving market, transparency and legal protection are essential to avoid risks related to counterfeit artworks, undocumented provenance, or legal issues. Due Diligence enables the parties involved in transactions to make informed decisions and minimize potential financial or reputational losses.

Mitigating Technological Risks in the Age of Digital Transformation

​In an era of rapid digital transformation, businesses face increasingly complex technological risks that require structured governance and proactive legal strategies. Cybersecurity threats, regulatory compliance in data management, and the ethical and legal implications of artificial intelligence are among the most pressing challenges for companies operating in today’s global market.

DISCLAIMER: the content of this news is for informational purposes only and neither represents, nor can be construed as a legal opinion