メニュー
[COMMUNITY] Assess EU Data Act (Regulation 2023/2854) compliance for connected products, data holders, and data processing service providers
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SOC 職業分類に基づく
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/ThomasMoreAI/legal-skills-open --skill arckit-eu-data-actコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
SKILL.md を表示中
Use when retrieving arbitration institutional rules (ICC, LCIA, SCC, SIAC, HKIAC, VIAC, МКАС/МАК при ТПП України, UNCITRAL) — fetching current version, verifying redaction applicable to the date of arbitration agreement, constructing URLs for official rule texts
Use when choosing the Polish legal regime for letters, requests, applications, complaints, petitions, public-information requests, KPA filings, PPSA complaints, RODO access requests, registry extracts, court-file access, tax/ZUS/cudzoziemcy/USC procedures, or professional lawyer letters. Prevents mixing UDIP, KPA, PPSA, RODO, registry, special-procedure, and advocate/radca letter regimes.
Use when preparing applications for recognition and enforcement of foreign arbitral awards in Poland, applications for setting aside arbitral awards under KPC art. 1205–1211, or opposing such applications — mapping Article V of the 1958 New York Convention to art. 1214–1215 of the Polish KPC, identifying grounds for refusal, structuring public policy arguments
| name | arckit-eu-data-act |
| title | User Input |
| description | [COMMUNITY] Assess EU Data Act (Regulation 2023/2854) compliance for connected products, data holders, and data processing service providers |
| author | tractorjuice |
| author_url | https://github.com/tractorjuice/arc-kit/tree/main/arckit-codex/skills/arckit-eu-data-act |
| license | MIT |
| version | 0.1.1 |
| execution_mode | open |
| jurisdiction | eu |
| practice | data-protection |
| language | en |
⚠️ Community-contributed command — not part of the officially-maintained ArcKit baseline. Output should be reviewed by qualified DPO / RSSI / legal counsel before reliance. Citations to ANSSI / CNIL / EU regulations may lag the current text — verify against the source.
You are helping an enterprise architect generate a EU Data Act Compliance Assessment (Regulation EU 2023/2854) for an organisation that manufactures connected products, holds data generated by those products, or provides data processing services. Most Data Act obligations apply from 12 September 2025.
$ARGUMENTS
Note: Before generating, scan
projects/for existing project directories. For each project, list allARC-*.mdartifacts, checkexternal/for reference documents, and check000-global/for cross-project policies. If no external docs exist but they would improve output, ask the user.
MANDATORY (warn if missing):
RECOMMENDED (read if available, note if missing):
OPTIONAL (read if available, skip silently):
external/ — extract existing data sharing agreements, product technical specifications, cloud provider contracts, trade secret registers000-global/policies/ — extract data governance policy, data sharing policy, trade secret protection policyIdentify the target project from the hook context. If the project doesn't exist:
projects/*/ directories and find the highest NNN-* numberprojects/{NNN}-{slug}/README.mdPROJECT_ID and PROJECT_PATHRead all documents from Step 0. Identify:
Read the template (with user override support):
.arckit/templates-custom/eu-data-act-template.md exists in the project root.arckit/templates/eu-data-act-template.mdBefore generating the assessment, determine applicable roles and chapters:
| Role | Trigger | Applicable Chapters |
|---|---|---|
| Manufacturer of connected product | Makes/imports product that collects data | Chapter II (user access), Chapter III (B2B sharing) |
| Provider of related service | Provides digital service linked to connected product | Chapter II, Chapter III |
| Data holder | Has right/obligation to make data available | Chapter II, III, V |
| Data processing service provider (DAPS) | IaaS/PaaS/SaaS/edge cloud provider | Chapter VI (switching) |
| Public sector body | Government requesting exceptional data access | Chapter V |
Show role determination before proceeding.
CRITICAL: Use the Write tool to create the assessment document.
Detect version: Check for existing ARC-{PROJECT_ID}-DATAACT-v*.md files:
Auto-populate Document Control:
ARC-{PROJECT_ID}-DATAACT-v{VERSION}Section 1: Role and Scope
Section 2: User Data Access Rights (Chapter II) (Manufacturer / Data holder)
Section 3: B2B Data Sharing (Chapter III) (Data holder)
Section 4: Public Sector Exceptional Access (Chapter V) (Data holder / Public sector body)
Section 5: Data Processing Service Switching (Chapter VI) (DAPS)
Section 6: International Data Transfer Restrictions (Article 27)
Section 7: Interoperability (Chapter VII)
Section 8: GDPR Intersection
$arckit-eu-rgpd if personal data is involvedSection 9: Gap Analysis and Timeline
Before writing the file, read .arckit/references/quality-checklist.md and verify all Common Checks pass.
Write the document to:
projects/{project_id}/ARC-{PROJECT_ID}-DATAACT-v{VERSION}.md
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ EU Data Act Assessment Generated
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📄 Document: projects/{project_id}/ARC-{PROJECT_ID}-DATAACT-v{VERSION}.md
📋 Document ID: {document_id}
📅 Assessment Date: {date}
⏰ Data Act Application: 12 September 2025
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔧 Role Assessment
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Roles in scope: {Manufacturer / Data holder / DAPS / Public body}
Connected product: {Yes / No}
Personal data involved: {Yes — GDPR also applies / No}
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📊 Obligations Summary
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
| Obligation Area | Status | Gaps |
|------------------------|-------------|------|
| User data access (Ch.II) | {status} | {N} |
| B2B sharing (Ch.III) | {status} | {N} |
| Cloud switching (Ch.VI) | {N/A or status} | {N} |
| Intl. transfer (Art.27) | {status} | {N} |
Total Gaps: {N} ({N} high)
Next steps:
1. {If personal data: Run $arckit-eu-rgpd}
2. {If procurement: Run $arckit-fr-marche-public for data sharing clauses}
3. Run $arckit-risk to register Data Act gaps
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
| Document | Publisher | URL |
|---|---|---|
| Data Act (Regulation 2023/2854) — full text | EUR-Lex | https://eur-lex.europa.eu/eli/reg/2023/2854/oj |
| European Commission — Data Act implementation page | European Commission | https://digital-strategy.ec.europa.eu/en/policies/data-act |
| European Data Innovation Board (EDIB) — guidance | European Commission | https://digital-strategy.ec.europa.eu/en/policies/european-data-innovation-board |
| GDPR full text (applies alongside Data Act for personal data) | EUR-Lex | https://eur-lex.europa.eu/eli/reg/2016/679/oj |
| EUCS — EU cloud certification scheme (complements Art. 27) | ENISA | https://www.enisa.europa.eu/topics/cloud-security |
| SecNumCloud (French cloud sovereignty — complements Art. 27) | ANSSI | https://cyber.gouv.fr/secnumcloud |
Note for reviewers: The Data Act (September 2025) is distinct from the GDPR and the Open Data Directive. It governs access to data generated by connected products (IoT, industrial equipment, smart appliances, vehicles) and switching between cloud providers. Key concepts: data holder (entity with right/obligation to make data available), DAPS (Data Processing Service provider — cloud IaaS/PaaS/SaaS), FRAND (fair, reasonable, and non-discriminatory terms for B2B data sharing). Article 27 restricts cloud providers from handing EU data to non-EU governments without a lawful EU/member state basis — directly reinforcing the DINUM cloud doctrine and SecNumCloud requirements in France.
projects/{project_id}/ARC-{PROJECT_ID}-DATAACT-v{VERSION}.md$arckit-eu-rgpd$arckit-eu-data-act Assess Data Act compliance for an industrial IoT platform collecting sensor data from 50,000 connected machines in EU factories, selling analytics as SaaS, B2B sharing with factory operators required
$arckit-eu-data-act Data Act scoping for 001 — cloud SaaS provider (IaaS switching obligations focus), assess egress charge elimination timeline and switching process requirements
$arckit-eu-data-act Data Act for a smart home appliance manufacturer (France), connected devices collecting usage data, assess user access rights and B2B sharing with maintenance service providers
After completing this command, consider running:
$arckit-eu-rgpd -- Assess GDPR obligations for personal data in the data sharing flows (when Data sharing includes personal data)$arckit-fr-marche-public -- Include Data Act data sharing obligations in procurement clauses (when Data sharing involves public sector bodies or procurement)$arckit-risk -- Integrate Data Act compliance gaps and data sharing risks into the risk register