{"id":1814,"date":"2026-01-09T15:44:18","date_gmt":"2026-01-09T15:44:18","guid":{"rendered":"https:\/\/aurele-it.fr\/?p=1814"},"modified":"2026-01-12T08:25:55","modified_gmt":"2026-01-12T08:25:55","slug":"eu-data-act-what-it-means-for-saas-providers-how-to-get-ready","status":"publish","type":"post","link":"https:\/\/aurele-it.fr\/en\/eu-data-act-what-it-means-for-saas-providers-how-to-get-ready\/","title":{"rendered":"The EU Data Act: What It Means for Saas Providers &#8211; and How to Get Ready"},"content":{"rendered":"<p>SaaS and digital service providers sit at the center of the new regulatory framework introduced by the Data Act.<\/p>\n<p>Starting in 2025, their contractual, technical, and pricing models will need to evolve to meet new requirements around data portability, interoperability, and customer mobility. The regulation fundamentally reshapes how SaaS companies design their architectures, structure their offerings, and secure long\u2011term commercial relationships.<\/p>\n<p>The analysis below highlights the key changes to anticipate and the areas where strategic planning will be essential.<\/p>\n<div><\/div>\n<h2><strong>Scope and Timeline: Who Is Affected?<\/strong><\/h2>\n<p>The Data Act entered into force in January 2024 and became fully applicable in September 2025.<\/p>\n<p>Any organization offering a data\u2011processing service\u2014of any kind\u2014within the EU or to customers located in the EU falls under its scope. This includes, in particular:<\/p>\n<ul>\n<li>SaaS platforms<\/li>\n<li>PaaS and IaaS offerings<\/li>\n<li>IT services hosting customer data<\/li>\n<li>Mobile apps and analytics tools<\/li>\n<li>AI services or dashboards embedded in broader solutions<\/li>\n<\/ul>\n<p>In practice, your organization may be affected even if you are not acting as a cloud provider.<\/p>\n<div><\/div>\n<p><strong>An Exception for Highly Customized Services ?<\/strong><\/p>\n<blockquote><p>Article 25 of the Data Act provides a limited exemption for services whose core functionalities are developed specifically for a single customer and are not deployed at scale. In such cases, the provider may be exempt from certain switching\u2011related obligations.<\/p>\n<p>However, the customer\u2019s right to terminate with two months\u2019 notice still applies\u2014even for fully bespoke solutions. Fixed\u2011term commitments will therefore need to be reconsidered.<\/p><\/blockquote>\n<div><\/div>\n<h2><strong>Switching Fees, Exit Fees, and Pricing Pressure<\/strong><\/h2>\n<p>The Data Act distinguishes several types of fees related to provider switching.<\/p>\n<p><strong>Switching Fees<\/strong><\/p>\n<p>Fees charged for moving from one service to another must be strictly cost\u2011based until January 12, 2027, after which they will be prohibited\u2014except for highly customized services.<\/p>\n<p><strong>Exit Fees<\/strong><\/p>\n<p>Fees charged when leaving a service will become difficult to justify if they create dependency or discourage customer mobility.<\/p>\n<p><strong>What Remains Possible<\/strong><\/p>\n<p>Providers may still:<\/p>\n<ul>\n<li>incorporate the ongoing cost of maintaining export and migration tools into their pricing,<\/li>\n<li>offer premium migration\u2011support services that go beyond the regulatory minimum.<\/li>\n<\/ul>\n<p>The challenge will be designing pricing models that remain both compliant and commercially viable.<\/p>\n<div><\/div>\n<h2><strong>Two\u2011Month Notice Period and Securing Fixed\u2011Term Contracts<\/strong><\/h2>\n<p>One of the major innovations of the Data Act is the universal right for any customer to terminate any contract with two months\u2019 notice\u2014at any time, including for customized solutions.<\/p>\n<p>Fixed\u2011term contracts remain possible, but their stability will now depend on the strategic use of proportionate early\u2011termination penalties.<\/p>\n<blockquote><p>Important note: the customer cannot exercise the termination right for convenience. It must correspond to an actual switch to another provider or a move to an on\u2011premises infrastructure (the customer\u2019s own data center).<\/p><\/blockquote>\n<p><strong>Penalties Under the Data Act<\/strong><\/p>\n<p>The Data Act explicitly allows such penalties, provided they:<\/p>\n<ul>\n<li>reflect the provider\u2019s actual economic loss,<\/li>\n<li>compensate for the interruption of a commitment rather than the act of switching providers,<\/li>\n<li>do not undermine portability.<\/li>\n<\/ul>\n<blockquote><p>In practice, these penalties may become the primary tool for stabilizing long\u2011term commitments once switching and exit fees are phased out.<\/p>\n<p>Designing defensible, economically sound, and proportionate penalties will require careful analysis. There is no one\u2011size\u2011fits\u2011all solution.<\/p><\/blockquote>\n<div><\/div>\n<h2><strong>Unfair Terms and Contractual Balance<\/strong><\/h2>\n<p>The Data Act introduces a framework to regulate contractual terms unilaterally imposed on business customers when they may restrict portability or create an imbalance in the relationship.<\/p>\n<p>Key clauses to reassess include:<\/p>\n<ul>\n<li>unilateral modification clauses,<\/li>\n<li>liability limitations,<\/li>\n<li>portability and cooperation obligations,<\/li>\n<li>renewal mechanisms,<\/li>\n<li>any clause that may hinder switching.<\/li>\n<\/ul>\n<blockquote><p>This framework complements French rules governing <a href=\"https:\/\/aurele-it.fr\/en\/standard-form-contracts-significant-imbalance-under-french-law\/\" target=\"_blank\" rel=\"noopener\">\u201csignificant imbalance\u201d in B2B contracts<\/a>, while adopting a mobility\u2011focused approach. Future case law will clarify its boundaries.<\/p>\n<p>Aurele IT will closely monitor any upcoming decisions that further clarify this framework and will keep you informed<\/p><\/blockquote>\n<div><\/div>\n<h2><strong>Commission Model Clauses: A Future Market Standard?<\/strong><\/h2>\n<p>The European Commission has published draft model contractual clauses to support switching, export, and interoperability obligations.<\/p>\n<p>Although not mandatory, these templates are expected to:<\/p>\n<ul>\n<li>shape market expectations,<\/li>\n<li>influence contract negotiations,<\/li>\n<li>be required by major or regulated customers.<\/li>\n<\/ul>\n<p>Providers should closely monitor updates to these templates, which may become a practical reference point.<\/p>\n<div><\/div>\n<p><strong>Conclusion: A New Commercial Balance for SaaS Providers<\/strong><\/p>\n<p>The Data Act establishes a contractual paradigm built on customer mobility, interoperability, and pricing transparency. For SaaS providers, compliance goes far beyond updating documentation. It requires a strategic redesign of the offering, including:<\/p>\n<ul>\n<li>revisiting pricing models,<\/li>\n<li>designing compliant export and migration mechanisms,<\/li>\n<li>adapting fixed\u2011term commitments,<\/li>\n<li>integrating proportionate penalties to secure long\u2011term relationships.<\/li>\n<\/ul>\n<p>Preparing early will allow providers to enter the 2025\u20132027 period with contractual frameworks that are both compliant and resilient.<\/p>\n<p><strong>AURELE IT supports SaaS and digital service providers in the contractual, strategic, and regulatory adjustments required under the Data Act.<\/strong> <strong>For any questions or tailored support, our team is here to help.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Data Act is reshaping the rules for SaaS providers\u2014customer mobility, migration fees, and fixed\u2011term contracts. Here\u2019s a breakdown of the contractual impacts and the levers available to secure long\u2011term customer relationships.<\/p>\n","protected":false},"author":2,"featured_media":1825,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,39,38],"tags":[],"class_list":["post-1814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-e-commerce-en","category-it"],"_links":{"self":[{"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/posts\/1814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/comments?post=1814"}],"version-history":[{"count":11,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/posts\/1814\/revisions"}],"predecessor-version":[{"id":1855,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/posts\/1814\/revisions\/1855"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/media\/1825"}],"wp:attachment":[{"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/media?parent=1814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/categories?post=1814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aurele-it.fr\/en\/wp-json\/wp\/v2\/tags?post=1814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}