New EU laws effective per 12 september 2025
Had to add a second post for the rest:
The Law
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202302854
Notice point 16 till 22 and point 40 till 42
Do you want to provide a short summary of what the law says?
Yes, since it might be complicated to understand (for me or anyone else) lets first confirm if we (owners / providers of a traccar server in the EU) are Data owners as discribed in the Law. Since in my opinion that is the first step to take to understand if the new law affects a traccar server owner / provider within the EU.
Point 21 from the FAQ url above.
Do we consider ourselfs Data Holders when we provide a service to others (users) who connect their / our devices to our server ?
Lets confirm this question and then move on to the next.
No One has an opinion about this first question ?
Let me also add that it does not matter if the traccar server data resides in the EU or outside the EU. With this Law it only matters if the User is in the EU.
So traccar servers hosted outside the EU are also affected if the User of that service resides in the EU.
Data holder is the one hosting the "database" and/or the application. The owner of the provided service.
Users are mere users, they are not data holders, they have access to data, but are not the ones hosting it or having control over it. (unless you give them special access/functions to have full controll on the data they generate.)
@Walter
Indeed, so when you or your company Host a traccar server in or outside the EU and make this services available to Users within the EU and the "Mere" Users use the service you provide with tracking devices within the EU. Then the Data holder (the traccar server owner who manages the data) needs to confirm to the new Law. You come to the same conclusion ?
Hi, Reading up on the New EU laws effective september 2025
https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained
The Huge FAQ
https://ec.europa.eu/newsroom/dae/redirection/document/108144
While reading the above i wonder how this data could be shared with the user / sub user.
I would think besides position data. Also the LBS and Wifi data that might be used to for data processing to enhance geolocation services that the device generates and reports to the server would fall under this law.
I would guesse this also goes for other data sensors like steps, heartrate etc.
Did anyone think about this how traccar sever can comply with these obligations (if it doesnt already) ?