EU regulators are digging their heels in despite big tech’s Data Act pushback
EU regulators are no strangers to big tech regulatory push back, so why do companies still persist?


EU regulators have once again hit back at big tech criticism of regulatory changes in what marks the latest tit-for-tat battle ahead of the pending Data Act.
Amid concerns the legislation could harm tech companies, Thierry Breton, European commissioner for internal markets, will say it’s expected to do the exact opposite.
Lawmakers won’t shift their stance either despite the mounting opposition from big tech, according to the draft text of a speech set to be delivered in San Francisco this week.
“Our European data strategy is to unlock a wealth of big data and set out how that data should be shared, stored, and processed. This will benefit all businesses – European, American, and others alike,” he is expected to say, and will add: “Assertiveness is not protectionism.”
Why tech companies are fighting the Data Act
The Data Act aims to prevent non-EU governments from accessing data processed by firms operating within the union. Rules outlined in the act will apply to both corporate and consumer data, and are applicable to a range of services and products, such as smart technologies and industrial machinery.
Some US companies, however, warn the legislation could have a negative impact on international data transfers and create additional cost burdens for companies that operate across borders.
RELATED RESOURCE
US firms aren’t alone in leveling criticism. Last month, Siemens and SAP suggested the act could compromise “trade secrets” due to provisions requiring companies to collaborate with third parties to ensure regulatory compliance.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
In an open letter to Breton, EU antitrust chief Margrethe Vestager, and Commission president Ursula von der Leyen, German companies opposed to the act said it “risks undermining European competitiveness by mandating data sharing”.
"Effectively, this could mean that EU companies will have to disclose data to third-country competitors, notably those not operating in Europe and against which the Data Act's safeguards would be ineffective," the letter read.
Pushing back against regulation
This criticism marks the latest in a long-running trend of big tech companies across the world pushing back against pending EU legislative changes.
Earlier this year, a number of industry stakeholders, most notably OpenAI, slammed the EU’s long-awaiting AI Act, branding it too restrictive and potentially inhibiting operations within the union.
OpenAI CEO Sam Altman sparked controversy after suggesting the firm could be forced to “leave Europe” if the act was approved as it stood. While Altman swiftly reneged on the threat and clarified OpenAI’s commitment to Europe, the comments drew harsh criticism from Breton.
Breton told Reuters at the time the AI rules are aimed specifically to safeguard the “security and well-being of our citizens” and insisted that changes “cannot be bargained”. He stressed the EU has been ahead of the curve in “designing a solid and balanced regulatory framework” in the interests of safety but also so Europe can “become a frontrunner in trustworth AI”.
Data sovereignty rules in the EU have also been in the crosshairs for non-EU firms, with the cyber security labeling rules described as “discriminatory” against international firms in recent months.
Big tech resistance is futile
Such pushback has a common theme: time and time again they fall flat.
The first real acid test for this was prior to the implementation of GDPR, which received a significant degree of resistance from firms within the union and internationally.
Similarly, cookie legislation and data-sharing rules in the wake of the Schrems cases, which saw companies such as Facebook hint they’d back out of the EU, fizzled out with a whimper.
It appears tech companies haven’t learned their lesson. EU lawmakers are steadfast in their position and unrelenting in their attempts to implement regulations that benefit member states and citizens.
For regulators to suddenly u-turn at the slightest hint of pushback would be disastrous from a political perspective. Companies, too, with even the slightest bone to pick would smell blood and pounce on future proposals.
This raises questions over why organizations continue to try so hard to water down legislation. There are two differing tactics at play – playing tough and cozying up – both of which aim to temper potential regulatory crackdowns.
Altman’s hardline approach backfired. But around the same time Microsoft president Brad Smith outlined how the organization planned to develop a responsible framework for generative AI development. This approach showed a more measured approach that could curry favor with regulators.
With the draft Data Act pending, organizations pushing back will likely find their criticism – which sometimes seems more like spitting out the dummy than offering constructive input – will come to no avail.

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd
-
NHS supplier hit with £3m fine for security failings that led to attack
News Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
By Emma Woollacott
-
‘It’s your worst nightmare’: A batch of €5 hard drives found at a flea market held 15GB of Dutch medical records – and experts warn it could’ve caused a disastrous data breach
News Robert Polet made a startling discovery after finding hard drives on sale for €5 each in a flea market.
By Solomon Klappholz
-
Unlock profitability with Cove Data Protection
Whitepaper Agile risk management starts with a common language
By ITPro
-
UK businesses patchy at complying with data privacy rules
News Companies need clear and well-defined data privacy strategies
By Emma Woollacott
-
GDPR fines might’ve dipped last year, but don’t get complacent – personal liability risks are rising
News A decrease in big GDPR fines doesn’t mean it’s plane sailing for enterprises in 2025
By Emma Woollacott
-
Data privacy professionals are severely underfunded – and it’s only going to get worse
News European data privacy professionals say they're short of cash, short of skilled staff, and stressed
By Emma Woollacott
-
FCC orders telcos to sharpen up security after Salt Typhoon chaos
News The move follows a devastating attack on US telecoms infrastructure
By Solomon Klappholz
-
US eyes 'Cyber Trust Mark' to lock down IoT frailties, but experts worry it doesn’t go far enough
News The label is intended to build trust in internet-connected devices
By Solomon Klappholz