Nearly every UK business relies on cloud software in some way, whether that’s for storing files, managing customer data, running operations or keeping teams connected. This matters right now. The EU Data Act came into force in September 2025, and even though the UK isn’t in the EU anymore, this law catches plenty of British companies that handle EU data, sell connected products into the single market, or use cloud providers operating in EU territory.
Let’s go over what the rules actually say, who they affect, what your business should do about them, and why the deadlines are closer than you think.
What the EU Data Act Actually Does
Two big ideas drive this law: data access and data portability. Businesses and consumers will have the right to access data they’ve generated through connected devices and cloud platforms, and cloud providers will be forced to make switching between services much easier for their customers.
Providers won’t be allowed to charge switching fees at all from January 2027. Anyone who’s tried to migrate between platforms and hit a wall of export restrictions, proprietary file formats, surprise charges or layers of bureaucracy will understand why that deadline matters so much.
For a small or mid-sized UK company, the bottom line is clear enough: your cloud provider will have to hand over your data in a format you can actually use, without dragging things out.
Which UK Businesses Are Caught by This?
You don’t need to be actively trading in the EU to fall within scope. The Act will apply if you offer data processing services to clients in EU countries, sell any internet-connected product into the EU, store data belonging to EU-based users, or manage digital content on their behalf.
Plenty of businesses won’t realise how far that last point stretches. If your company manages photos, contracts, campaign materials or other files for EU clients through a cloud-based platform, the portability rules will kick in.
Creative and marketing businesses get hit hardest by the overlap between the EU Data Act and digital asset management, because the portability requirement doesn’t stop at the files themselves. Images, videos, brand assets and creative files stored in cloud systems all carry metadata, usage rights, permissions and folder structures that need to travel with them when switching providers. Losing that context during a migration turns what could’ve been a logistical headache into a genuine compliance problem.
What You Should Do Now
You won’t need a legal team or a six-month project to get moving on this. A few concrete steps will put your business in a much stronger position before the deadlines arrive.
Check your cloud contracts first. Look at what your current providers say about data export, switching fees, supported file formats and data retention policies. Vague or restrictive terms are a sign you need to have that conversation now instead of later.
Then, ask your providers whether they can export your data in structured, machine-readable formats. An unclear answer should be treated as a red flag.
Also think carefully about what you’re actually storing. Files on their own only tell half the story, because the metadata, permissions, usage rights and licensing information attached to those files will carry just as much weight, especially when you handle licensed content or work with client assets.
Where UK Businesses Stand After Brexit
Brexit didn’t draw a clean line between UK and EU data rules. The UK’s data protection framework already overlaps heavily with GDPR, and many British businesses process EU data every single day. The Data Act adds yet another layer, but the core principle hasn’t changed: handle EU data, follow EU rules.
Honestly, most of what the Act requires is just good practice anyway. Knowing where your data is stored and making sure you can move it without getting locked into one vendor will protect your business whether regulators come calling or not.
A Simpler Way to Think About It
Don’t treat this as another pile of red tape to stress over. Ask yourself a question that probably should’ve come up years ago: if you needed to move all your cloud data tomorrow, could you actually do it?
If yes, you’re sorted. If no, the EU Data Act has just handed you a deadline to fix that.Written by Lydia White
Article written by Lydia White
Leave a comment