How does the EU Data Act affect my choice between physical SIM and eSIM for IoT?

The Data Act mandates the ability to switch connectivity providers within 30 days without physical intervention. Physical SIMs require a truck roll to replace, making eSIM (with remote provisioning via GSMA SGP.32) the only viable option for deployments over 50 devices. eSIM adds €0.50–€1.00 per device but avoids SIM swap costs of €5–€15 per device.

What specific contract clauses should I include in an IoT connectivity RFP to ensure EU Data Act compliance?

Include: (1) a data portability clause guaranteeing RESTful M2M API access within 30 days of request; (2) a switching clause stating no penalties and a maximum 21-business-day profile change; (3) a prohibition on minimum contract terms longer than 12 months; (4) a clause that data ownership remains with your company. Request evidence of the supplier's CMP compliance with GSMA SGP.32.

When can I use catalog pricing for IoT SIM under the EU Data Act?

Catalog pricing works for deployments under 500 devices, single-country (e.g., only France), and where data access is not time-critical (batch upload daily). Ensure the catalog contract explicitly states no lock-in and includes a basic API. For larger or multi-country fleets, a project quote is necessary to negotiate switching timelines and custom API endpoints.

EU Data Act Compliance for IoT eSIM Deployments: What Connectivity Buyers Need to Know

July 30, 2026 · 6 min read · Technical Whitepapers

The EU Data Act (effective Sep 2025) mandates data portability and service switching for IoT devices. For eSIM deployments, this requires multi-carrier eUICC profiles and CMP APIs. Procurement teams should budget €0.50–1.00 per eSIM profile and avoid contracts with data lock-in clauses.

The EU Data Act (Regulation 2023/2854) is a regulation that grants IoT device owners the right to access and transfer their device data, and to switch connectivity providers without undue delay. For a 1,000-device fleet using eSIM, compliance requires that each device's eSIM profile can be remotely switched to a new carrier within 30 days, adding €500–€1,000 in profile management costs upfront.

WHY IT MATTERS

Before the Data Act, procurement teams could sign multi-year contracts with a single carrier and face switching penalties of 20–30% of remaining contract value. Now, any contractual clause that restricts data portability or switching is automatically void under Article 26 of the Act. This shifts IoT SIM procurement from a one-time carrier selection to a flexible multi-carrier strategy enforced by eSIM and a CMP platform. The operational boundary changes: you can no longer accept a contract that charges extra for data export or locks you into a minimum 24-month term with a 12-month notice period. The Act requires that connectivity providers offer a structured, machine-readable data stream via API (RESTful M2M) within 30 days of a portability request. For a fleet of 500+ devices, this means the eSIM profiles must support GSMA SGP.32 remote provisioning to enable carrier switching without physical SIM replacement.

TYPICAL APPLICATIONS

Fleet Telematics

Fleet operators with 200+ vehicles across Germany, France, and Poland need to ensure that data from each vehicle's telematics unit (location, diagnostics) is accessible via a single API, even if vehicles roam across carriers. Before the Data Act, the fleet manager was tied to one global IoT SIM provider with a high exit penalty. Now, the fleet buyer should procure eSIMs with multi-carrier profiles via a CMP platform that exposes a RESTful M2M API for real-time data access. Catalog pricing may cover up to 500 devices in one country, but cross-border fleets require a project quote to define the data portability SLA and switching timeline.

Smart Metering

Utility companies deploying 10,000 NB-IoT smart meters in Spain must comply with the Data Act's data-sharing obligations. The meters generate usage data every 15 minutes; the utility must be able to transfer that data to a new analytics provider within 30 days. Physical SIMs would require a truck roll. Therefore, the procurement decision is to use embedded eSIM (eUICC) and negotiate a CMP contract that includes an API for bulk profile switching. A project quote is mandatory because the volume (10,000 devices) and the need for a custon data export API exceed standard catalog offerings.

EV Charging Stations

Charging station operators with 50–100 stations in Belgium and the Netherlands must provide real-time session data to grid operators and roaming hubs. The Data Act mandates that the station's connectivity provider cannot block data sharing with third-party platforms. This forces the buyer to choose a CMP platform that offers an open API for session data (OCPI-compatible). For 100 stations, catalog pricing for connectivity (€5–€8 per station/month) may work, but the API integration requires a one-time project quote of €2,000–€5,000.

TECHNICAL SPECIFICATION / COMPARISON TABLE

Dimension	Before EU Data Act	After EU Data Act	Procurement Impact	-----------	--------------------	-------------------	---------------------	Switching time allowed	90 days (typical)	≤30 days (Article 23)	Must select eSIM with GSMA SGP.32 CMP that can execute profile switch in <30 days	Data portability API	Not mandated; may require manual export	Mandated RESTful M2M API (Article 4)	CMP must provide documented API; demand proof of API in RFP	Contract lock-in clauses	24-month minimum, 30% early termination fee	Prohibited (Article 26)	Avoid any supplier with exit penalties; choose catalog pricing only if contract has no lock-in	Multi-carrier profiles	Not necessary; single carrier SIM	Required for compliance (if roaming)	eSIM with at least 2 carrier profiles from different MNOs	Profile management platform	Physical SIM + manual logistics	eUICC CMP with remote provisioning	Budget €0.10–€0.50 per device/month for CMP platform fees

SELECTION NOTES

When the deployment has fewer than 500 devices, uses a single EU country (e.g., all devices in Germany), and data access is not time-critical (batch daily upload), catalog pricing from a supplier that offers a compliant contract (no lock-in, basic API) is sufficient. The catalog must explicitly state that the Data Act portability SLA is ≤30 days.

When the deployment exceeds 500 devices, operates across two or more EU countries, or requires real-time API access (>1 session/hour), a project quote is required. The project quote must include: (1) multi-carrier eSIM profiles provisioned via a CMP platform; (2) a RESTful M2M API with documented endpoints for data export; (3) a contractual commitment to switch carriers within 21 business days (below the 30-day regulatory limit); (4) a data portability testing plan paid by the supplier. Do not accept a quote that does not itemize these components.

Measurable trigger: if your average data per device exceeds 500 MB/month, you also need a project quote to negotiate data overage rates and avoid throttling that could block data portability.

COST MODEL / TCO

Hardware Costs

eSIM chip (eUICC) adds €0.50–€1.00 per device vs. a physical SIM (€0.10). For 1,000 devices: €500–€1,000 upfront. No installation cost difference if the chip is soldered during manufacturing.

Connectivity Costs

Standard IoT data plan for fleet telematics (100 MB/month per device): €3.00–€5.00 per device/month. Under catalog pricing, this is fixed. With project quote, you may negotiate 10–15% volume discount for >500 devices.

CMP Platform Costs

CMP platform for managing eSIM profiles and API: typically €0.10–€0.50 per device/month. For 1,000 devices: €100–€500/month. This is mandatory for Data Act compliance.

API Integration and Compliance

One-time cost to integrate the supplier's API with your back-end: €5,000–€20,000 depending on IT setup. Also budget €2,000–€5,000 for legal review of the procurement contract to verify no lock-in clauses.

Payback

Avoiding carrier lock-in saves 15–30% on contract renegotiation costs (e.g., buying out a 2-year term early). For 1,000 devices with a €30,000 annual connectivity spend, that’s €4,500–€9,000 saved if you need to switch mid-contract. The payback period for the eSIM + CMP investment (€1,000 hardware + €600/month platform vs. €400/month physical SIM management) is 12–18 months.

When is catalog pricing enough?

Catalog pricing is sufficient when your deployment is under 500 devices, single-country, and you can accept a 30-day switching SLA without needing a real-time API. Confirm in writing that the supplier's standard terms comply with EU Data Act Article 26 (no lock-in) and Article 4 (data portability via API).

When must this go to project quote?

You must request a project quote if any of these conditions apply: deployment >500 devices, multi-country (≥2 EU member states), real-time data access requirements, average data >500 MB/device/month, or if you want a shorter switching timeline (e.g., 10 business days). A project quote allows you to negotiate custom API endpoints, multi-carrier profiles, and an exit fee waiver.