Overview
The EU Data Act turns cloud switching from a contract promise into a testable capability. This series defines the covered data-processing service, maps exportable data, digital assets, actors, deadlines, and exclusions, then distinguishes infrastructure-only IaaS functional-equivalence duties from PaaS and SaaS interface and export duties. It follows layered interoperability, standards, parallel use, charges, exceptions, security, privacy, and jurisdiction to a maintained rehearsal standard: providers remove specified obstacles, while customers prove the destination can carry the workload. It does not make clouds interchangeable or transfer destination engineering to the source provider.
Learning outcomes
- A data export is not an exit: the destination must restore required meaning, functions, policies, continuity, and security.
- The Data Act requires providers to describe and support the portable surface and exit clock, but customers and destinations still own target-side transformation and validation.
- IaaS, PaaS, and SaaS need different evidence: functional equivalence for infrastructure-only services, and interfaces, export, and interoperability tests for higher-level services.
- A defensible exit is rehearsed and maintained with rights, exclusions, costs, security, privacy, standards, exceptions, and change triggers recorded.
Keywords
Preview every chapter · Unlock full text, audio, and video from chapter 4
PlansFAQ
What does the EU Data Act require for cloud switching?
For covered data-processing services, the EU Data Act requires providers to remove specified switching obstacles and provide defined information, portable material, assistance, continuity, and security support. It does not guarantee an identical replacement or require the source provider to rebuild the destination.
Is downloading cloud data enough to exit a provider?
No. Downloading data alone does not demonstrate a successful cloud exit. A credible exit also accounts for use-generated metadata, right-of-use digital assets, transformation, destination functionality, policies, continuity, security, retrieval, and erasure.
How do IaaS, PaaS, and SaaS differ when switching under the EU Data Act?
They differ by the source-provider duty and the evidence needed: infrastructure-only IaaS centers on functional equivalence, while PaaS and SaaS center on open interfaces, structured export, and interoperability. The customer still validates workload-specific outcomes; the law does not require a source provider to rebuild a managed application.
Does using two cloud providers prove a successful exit?
No. Using two cloud providers is in-parallel use, not necessarily a completed switch. It can support staged migration, but ongoing data flow, egress, policy alignment, failure handling, and source disconnection still need separate evidence.