What the owner is owed · EU Data Act
Your data can't be quietly reached across borders.
Providers must publish where it lives and shield it from unlawful foreign access.
The jurisdictions your data sits in must be published, and your provider must take real measures against foreign governmental access that would conflict with EU or national law.
Paraphrase. The articles below say it precisely.
When
| 12 September 2025 | Applies |
|---|
The law behind it
- Article 28 Contractual transparency obligations on international access and transfer
- Article 32 International governmental access and transfer
Where it lives
Stop 3, Cloud service, Stop 4, Cloud AI .
What to ask beside it
GDPR: Is this data about people? In the rulebook
Not legal advice. This is the author’s own reading of the law, written to help facilities managers ask better questions. It has not been reviewed by a lawyer. For decisions, read the official text and take legal advice.