欧盟《数据法》已经适用:采购智能设备和工业机器时,数据访问权应该怎么写进合同?

欧盟《数据法》已经适用:采购智能设备和工业机器时,数据访问权应该怎么写进合同?
买到一台智能机器,不应只得到机器本体。买家还应知道设备会产生哪些数据、如何拿到、能否交给维修商,以及供应商停服后怎么办。

欧盟《数据法》自2025年9月12日起适用,赋予个人和企业用户访问、使用及共享联网产品所产生数据的权利。工业机器、车队设备、农业设备和楼宇系统的采购,因而多了一个必须谈清楚的交付物:数据。

为什么数据权利会影响设备总成本?

维修和优化依赖数据

设备告警、能耗、振动、产量和故障代码可以帮助买家安排维护。如果这些数据只能在供应商的封闭平台里查看,买家可能长期承担订阅费,也难以选择第三方服务商。

“可访问”不等于“好使用”

供应商允许下载PDF报告,并不等于提供可用于分析的原始数据。买家需要确认格式、频率、接口、历史范围和字段定义。

智能设备数据条款清单

条款应问的问题合理交付方式
数据目录设备产生哪些数据字段字典与示例数据
访问方式实时还是定期导出API、标准文件或本地接口
数据质量单位、时间戳是否一致数据说明与质量规则
第三方共享能否交给维修商授权流程与安全控制
费用哪些包含在设备价格中清晰费率和上限
退出机制合同结束后如何取回数据批量导出与删除证明

RFQ阶段要做什么?

不要只问“是否支持API”。应提供一个小型测试场景,例如:每15分钟导出运行时间、能耗和故障代码,并导入买家的维护系统。让供应商在报价前说明接口、许可和额外费用。

合同阶段要写清什么?

数据范围和目的

列出买家可以访问的数据及允许用途,同时保护供应商的商业秘密、个人数据和系统安全。权利不是无限制的,但边界应具体。

服务连续性

约定云平台停机、供应商被收购或产品停产时的数据导出与迁移支持。对关键设备,可要求本地运行或应急访问方案。

版本变化

固件更新可能改变字段和接口。合同应要求提前通知,并提供兼容期,避免买家的维护系统突然失效。

验收时如何测试?

用真实设备产生一组数据,验证时间戳、单位、缺失值、导出速度和权限。再模拟把数据授权给第三方服务商,确认流程不是纸面承诺。

适用边界

数据访问仍受个人数据保护、网络安全、商业秘密和知识产权等规则限制。不同产品、合同日期和角色可能适用不同安排。本文是采购框架,不替代法律意见。

FAQ

买家可以要求供应商免费提供所有数据吗?

不能简单理解为所有数据永久免费。要区分法规保障的数据、额外分析服务和合理成本,并在合同里提前确认。

设备数据等于个人数据吗?

不一定,但部分设备数据可能识别个人或行为,需要同时遵守数据保护要求。

最容易漏掉的条款是什么?

退出和迁移。很多合同写了如何开始使用,却没有写合作结束时怎样完整取回数据。

智能设备的价值越来越取决于买家能否持续使用它产生的数据。

设备采购的完整交付,应是“硬件+可用数据+可持续访问方式”,而不是一台被平台锁住的机器。

参考来源

Buying a smart machine should mean receiving more than the physical equipment. Buyers should also know what data the equipment generates, how to access it, whether it can be shared with maintenance providers, and what happens if the supplier discontinues the service.

The EU Data Act has applied since September 12, 2025, giving individual and business users the right to access, use, and share data generated by connected products. Procurement of industrial machinery, fleet equipment, agricultural equipment, and building systems therefore includes another deliverable that must be clearly negotiated: data.

Why Do Data Rights Affect the Total Cost of Equipment?

Maintenance and Optimization Depend on Data

Equipment alerts, energy use, vibration, output, and fault codes can help buyers plan maintenance. If this data can only be viewed on a supplier's closed platform, buyers may face ongoing subscription fees and find it difficult to choose third-party service providers.

"Accessible" Does Not Mean "Usable"

Allowing buyers to download PDF reports is not the same as providing raw data suitable for analysis. Buyers should confirm formats, frequency, interfaces, historical coverage, and field definitions.

Smart Equipment Data Clause Checklist

ClauseQuestion to AskReasonable Delivery Method
Data inventoryWhat data does the equipment generate?Field dictionary and sample data
Access methodReal-time access or scheduled exports?API, standard files, or local interface
Data qualityAre units and timestamps consistent?Data documentation and quality rules
Third-party sharingCan data be shared with maintenance providers?Authorization workflow and security controls
FeesWhat is included in the equipment price?Clear rates and caps
Exit mechanismHow is data retrieved when the contract ends?Bulk export and proof of deletion

What Should Be Done at the RFQ Stage?

Do not ask only whether an API is supported. Provide a small test scenario, such as exporting runtime, energy consumption, and fault codes every 15 minutes and importing them into the buyer's maintenance system. Ask the supplier to explain interfaces, licensing, and additional fees before submitting a quotation.

What Should Be Clearly Written into the Contract?

Data Scope and Purpose

List the data that the buyer may access and its permitted uses, while protecting the supplier's trade secrets, personal data, and system security. These rights are not unlimited, but their boundaries should be specific.

Service Continuity

Agree on data export and migration support if the cloud platform goes offline, the supplier is acquired, or the product is discontinued. For critical equipment, buyers may require local operation or emergency access arrangements.

Version Changes

Firmware updates may change fields and interfaces. The contract should require advance notice and a compatibility period so that the buyer's maintenance system does not suddenly stop working.

How Should Acceptance Testing Be Conducted?

Generate a set of data with actual equipment and verify timestamps, units, missing values, export speed, and permissions. Then simulate authorizing a third-party service provider to access the data and confirm that the process is more than a paper promise.

Scope and Limitations

Data access remains subject to rules on personal data protection, cybersecurity, trade secrets, and intellectual property. Different products, contract dates, and roles may be subject to different arrangements. This article provides a procurement framework and does not replace legal advice.

FAQ

Can Buyers Require Suppliers to Provide All Data Free of Charge?

It cannot simply be assumed that all data must be provided free of charge. Buyers should distinguish between data covered by statutory rights, additional analytics services, and reasonable costs, and clarify these points in the contract in advance.

Is Equipment Data the Same as Personal Data?

Not necessarily, but some equipment data may identify individuals or their behavior and must also comply with data protection requirements.

Which Clause Is Most Often Overlooked?

Exit and migration. Many contracts explain how to start using a service but not how to retrieve all data when the relationship ends.

The value of smart equipment increasingly depends on whether buyers can continue using the data it generates.

Complete delivery of equipment should mean "hardware + usable data + a sustainable access method," not a machine locked into a platform.

References