Contractual practices prohibited under the Data Act 

17 November 2025 | Knowledge, News, The Right Focus

One of the key aspects of the Data Act[i] is the introduction of provisions on prohibited contractual practices. These provisions are intended to protect businesses operating within the broadly understood digital industry that have a weaker contractual position.

Contractual practices that have been deemed prohibited

The Data Act prohibits the use of contractual terms concerning:

  • Access to and use of data
  • Liability and remedies for breach or termination of data-related obligations

that are unfair and have been imposed by a (stronger) party on the other (weaker) party to the contract.

Terms are considered unfair if their use grossly deviates from good commercial practice and if they:

  • Do not reflect mandatory provisions of EU law that would apply if the term had not been included in the contract

The Data Act distinguishes between two categories of unfair contractual terms:

  • Unfair
  • Presumed unfair

Unfair terms (blacklist)

A contractual term will always be considered unfair if its object or effect is to:

  • Exclude or limit the liability of the stronger party for intentional acts or gross negligence
  • Exclude the remedies available to the weaker party in the event that the stronger party fails to perform or breaches the contract
  • Give the stronger party the exclusive right to decide whether the data supplied is in conformity with the contract or the exclusive right to interpret the contract

Terms presumed to be unfair (greylist)

In accordance with the Data Act, a contractual provision is presumed to be unfair if its object or effect is to:

  • Inappropriately limit the remedies or extend the liability of the weaker party, or inappropriately limit the liability of the stronger party
  • Allow the stronger party to access and use the weaker party’s data in a manner that is significantly detrimental to the legitimate interests of the weaker party
  • Prevent the weaker party from using the data provided or generated by it during the term of the contract, or restrict such use to the extent that the weaker party cannot use the data in an adequate manner
  • Prevent the weaker party from terminating the contract within a reasonable period
  • Prevent the weaker party from obtaining a copy of the data supplied or generated by that party during the term of the contract or within a reasonable period after its termination
  • Enable the stronger party to terminate the contract at unreasonably short notice
  • Enable the stronger party to substantially change the price agreed in the contract or any other substantive terms relating to the nature, format, quality or quantity of the data to be shared, where no valid reason and no right of the other party to terminate the contract in the case of such a change is specified in the contract

The stronger party may rebut the presumption if they can demonstrate that, in this specific situation, the term should not be considered unfair.

Consequences of applying unfair contractual terms

It should be borne in mind that unfair contractual terms are not binding on the weaker party. If an unfair term can be severed from the remaining terms of the contract, those remaining terms will remain binding. However, if the rest of the contract cannot be performed separately from the unfair terms, the entire contract will be invalidated.

Contracts covered by the new rules

The new Data Act provisions on unfair contractual terms apply:

  • from 12 September 2025 – to contracts concluded after that date
  • from 12 September 2027 – to contracts concluded on or before 12 September 2025, provided that they are:
    • of indefinite duration, or
    • due to expire at least 10 years from 11 January 2024

Any questions? Contact us

[i] The Data Act is an EU regulation (2023/2854) that introduces new rules on the use of both personal and non-personal data.

Latest Knowledge

Dual-use items: how broad will the CJEU’s definition be?

A training aircraft designed for civilian purposes can also qualify as a military item. That’s a conclusion emerging from the Advocate General’s Opinion in Case C-538/25 (Flugzeugherstellerin) before the Court of Justice of the European Union. What does this mean for companies exporting goods from the EU?

Workplace harassment and discrimination: new regulations for employers

The Sejm has passed an amendment to the Labour Code concerning workplace harassment and discrimination. The changes introduce a broader definition of the concept itself, new forms of harassment, clearer definitions of what constitutes, for example, sexual harassment, and new rules governing the handling of such cases, including the reversal of the burden of proof, higher compensation awards, and the jurisdiction of district courts. The provisions will enter into force on 5 November 2026. We examine what will change and how much time remains to adapt company documents, policies, and the organisation as a whole.

ESG Roadmap. How to identify which regulations apply to your business and build a strategy

As we know, ESG in business is a roadmap made up of numerous obligations arising from different regulatory frameworks. That is why the right question is not “how do I meet all the requirements?” but rather “which of them apply to my business?”. This is a crucial distinction. We explain how to correctly diagnose your regulatory profile and build an effective ESG strategy – one that actually works and gives you a competitive edge.

Announcement of Income Tax Reform

On 19 August, during a press conference, the Prime Minister announced a package of tax changes planned for next year. According to the announcement, the reform is intended, on the one hand, to ease the burden on the middle class and, on the other, to shift a greater fiscal burden onto the wealthiest individuals and the largest companies. We take a look at the proposals included in the announced package and explain what they might mean for taxpayers.

Family foundations and the tax authorities: what draft bill UD447 proposes and why this is not the end of the troubles

Family foundations were intended to provide entrepreneurs with a stable framework for intergenerational wealth management. Yet not even four years have passed since the first such foundations were established, and the rules governing their taxation are set to be changed once again. This is because the scale of interest and the practical problems uncovered have overwhelmed the drafters of the legislation, as best illustrated by the figures – 927 applications for individual tax rulings and 77 opinions issued from the Head of the National Revenue Administration. This does not, however, mean that family foundations are being used on a massive scale for aggressive tax optimisation. A significant proportion of the queries concerned simply how to correctly apply the complex regulations.

Banking today and tomorrow | Financial sector overview | August 2026

Poland’s banking sector has reacted with concern to recent remarks by Katarzyna Pełczyńska-Nałęcz, the Minister of Development Funds and Regional Policy, who announced plans to put forward a proposal for a further increase in CIT levied on banks. The Minister’s reasoning, however, rests on a flawed conflation of the sector’s liquidity with its profitability, revealing a fundamental misunderstanding of how the banking sector operates and how its financial health is assessed. What is more, it feeds into a worrying trend of replacing substantive debate with simplistic, populist messaging which may be politically appealing but is not underpinned by either facts or economic analysis.

NIS2 and the National Cybersecurity System Act in transport: what you need to do before October 2026

The amended Act on the National Cybersecurity System (UKSC) has been in force since 3 April 2026. For transport sector undertakings, this means a specific compliance timeline, including an obligation to register with the National Cybersecurity System (KSC) registry by 3 October 2026. Failure to do so may result in substantial financial penalties, coupled with the risk of personal liability for senior management. Not every undertaking, however, automatically falls within the scope of the new regime. Read on to find out whether your organisation is affected and what you need to do before the deadline for preparation.

Family foundations: the government has done the maths and presented the bill

Three years. That’s how long we’ve been waiting for what the Council of Ministers had seen in the data from the outset – and has now disclosed in its review of the Family Foundation Act. The document not only diagnoses the problems, but also previews substantial changes to rules that founders and their advisers treated as settled and stable. And therein lies a problem that goes far beyond tax matters. If the rules of the game are changed while the game is being played, there can be neither planning stability nor trust in the law. It is no coincidence that one of the greatest concerns among entrepreneurs considering setting up a foundation is not the level of taxation, but the stability of the legal framework – which today is once again being called into question.

Contact us:

Konrad Grussy

Konrad Grussy

Advocate Trainee / Senior Associate / NewTech / Data Protection and Cyber Security

+48 508 326 306

k.grussy@kochanski.pl

Monika Maćkowska-Morytz

Monika Maćkowska-Morytz

Advocate / Partner / NewTech / Head of the Personal Data Protection & Cybersecurity Practice

+48 660 765 918

m.mackowska-morytz@kochanski.pl

Natalia Kotłowska-Wochna

Natalia Kotłowska-Wochna

Attorney-at-Law / Partner/ New Tech, IP, Trade & Logistics Practice Group / Head of New Tech M&A

+48 606 689 185

n.kotlowska@kochanski.pl