B2B IoT / connected-product brand without EU Data Act DSR endpoint or contact

The EU Data Act gives customers of connected products, such as B2B Internet of Things (IoT) devices, a right to request access to and portability of the data those products generate. This check looks for a dedicated mechanism for these requests, either a /.well-known/data-rights page or a clearly visible contact, within one click of the site's footer. On this site, the business appears to sell a connected product, but no such endpoint or contact was found. The EU Data Act took effect for B2B IoT products on 12 September 2025 and is expanding further through 2026. It requires an accessible mechanism for data portability requests, and a business with any EU customers is non-compliant without one. This is a newer, less well-known obligation, so it's an easy gap for a connected-product business to have missed entirely. Your privacy lawyer and developer should publish a /.well-known/data-rights page or add a clearly visible 'Request your data' link in the site footer, along with a dedicated contact address such as data-rights@yourdomain.com and a stated response timeframe, commonly 30 days. Document the internal process for handling these requests once they arrive. Budget around a day to set this up properly.