Regulatory Framework
The EU Data Act, adopted on December 13, 2023 and entering into application on September 12, 2025, establishes a comprehensive framework for data sharing in the connected-product economy. Article 3 imposes a design-for-portability obligation on manufacturers of connected products, requiring that data be made accessible to the user by default. Article 4 grants users a right of direct access to product and related-service data and obligates the data holder to make that data available without undue delay, free of charge, in a structured, commonly-used, and machine-readable format. Article 5 grants users the right to direct the data holder to share data with a third party, again under FRAND terms (Article 9), with explicit prohibitions on exclusivity, on the use of shared data to develop competing products (Article 6), and on the imposition of unreasonable contractual terms (Article 13).
The EU Data Governance Act, applicable from September 24, 2023, governs data intermediation services (Articles 10-15) and data altruism organizations (Articles 16-25). Article 12 imposes on data intermediation service providers a structural separation: the provider may not use the data for any purpose other than to make it available to data users, may not monetize the data beyond what is necessary to develop the service, and must place itself in a position of neutrality between data holders and data users. The DGA was designed to break the platform-operator capture pattern under which an intermediary monetizes the data flowing across its platform.
IDS-RAM 4.0, published by the International Data Spaces Association, defines the technical substrate for sovereign data exchange across organizational boundaries: connectors, identity providers, clearing houses, vocabulary providers, and app stores. The Gaia-X Trust Framework defines the federation, identity, and policy primitives for European data spaces, Catena-X for automotive, Mobility Data Space for mobility, Manufacturing-X for industry. In the United States, Section 5 of the FTC Act, the Consumer Privacy Rights Act in California (CPRA), and the Colorado, Connecticut, Texas, Utah, and Virginia comprehensive privacy regimes establish equivalent (though less unified) constraints on IoT-data brokerage. Across regimes, the architectural consequence is identical: the platform-operator-capture business model is foreclosed.
Architectural Requirement
The architectural requirement implicit in this regulatory stack is a substrate for pair-settled bilateral data exchange, sensor-deployer to data-consumer, in which the marketplace operator is structurally incapable of capturing or re-monetizing the data that crosses the substrate. The Data Act's Article 5 third-party-sharing obligation presupposes that the data holder can route data to a user-designated recipient without an intermediary inserting itself between them; the DGA's Article 12 neutrality obligation presupposes that the intermediary's role is structurally limited to facilitation, with no business-model dependency on the content of what is intermediated.
The IDS-RAM connector model and the Gaia-X federation model both gesture toward this requirement but leave the trust substrate unspecified. A connector is only as trustworthy as the identity, authority, and policy framework under which it operates; a federation is only as governable as its underlying admissibility model. For an automotive-data exchange across many OEMs, their Tier-1 suppliers, and an unbounded set of third-party data consumers, the trust substrate cannot be a centralized clearing house, that is the very pattern the DGA prohibits. It must instead be a distributed admissibility primitive that binds each bilateral exchange to identity, authority, jurisdiction, time, and content without routing the data through a capturing intermediary.
Data-quality credentialing, data-provenance tracking, and per-record consent management are first-order obligations under the regulatory stack. Article 4 of the Data Act requires that the data made available be accurate, complete, and timely; the GDPR's Article 6 lawfulness-of-processing analysis must be supportable on a per-record basis; the FTC's expectation that data-broker representations not be deceptive presupposes that data lineage can be reconstructed on demand. The architectural requirement is therefore not merely a settlement primitive but a settlement primitive grounded in attested provenance.
Why Procedural Compliance Fails
Procedural IoT data monetization platforms, the automotive-data exchanges, mobility-data marketplaces, consumer-data brokerages, and first-generation industrial-IoT platform marketplaces that dominate the category, all replicate the platform-operator-capture pattern that DGA Article 12 prohibits. The platform sits between sensor-deployer and data-consumer, takes custody of the data, normalizes it, repackages it, and resells it under terms that the platform sets. Even where the platform's terms of service nominally honor data-holder ownership, the technical substrate routes data through the platform's infrastructure, providing the platform with structural capability to monetize beyond cost recovery.
Bolt-on consent and privacy tooling cannot retrofit the architectural defect. A consent-management platform layered over a centralized data-broker substrate produces a record of consent without altering the structural fact that the platform retains custody of the data. The DGA's Article 12 neutrality obligation is not satisfied by procedural separation between the platform's data-intermediation business and its other business lines: it is an architectural obligation that the platform cannot use the data beyond facilitation. Where the substrate gives the platform structural capability to use the data, the procedural separation is insufficient.
The Data Act's Article 5 third-party sharing obligation is particularly punishing for procedural compliance. When a vehicle owner directs a manufacturer to share telematics data with a third-party fleet-management service, the manufacturer must execute the share without imposing exclusivity, without imposing unreasonable terms, and without using the share as an opportunity to extract competing-product-development insight. Where the share is mediated by the manufacturer's own data-platform infrastructure, the structural conflict between the manufacturer's interest in retaining customer data and the user's right to redirect it produces continuous compliance friction. The architectural fix is to remove the manufacturer's platform from the path of the share entirely.
What the Governed-Marketplace Primitive Provides
The Governed Marketplace, disclosed in U.S. Provisional Application No. 64/049,409, provides pair-settled bilateral exchange grounded in a governance-chain trust substrate. The disclosure describes a marketplace primitive that exchanges governance-credentialed commodities between governance-credentialed contributors and consumers without requiring a third-party platform operator to mediate trust, identity, settlement, dispute resolution, or reputation, and it enumerates a personal-data marketplace instance in which individuals offer their own observations subject to privacy governance through direct matched-pair settlement. Each data trade is a bilateral settlement between the sensor-deployer (the data holder, in Data Act terms) and the data-consumer, executed through the matched-pair settlement primitive of the same disclosure, which produces a persistent, governance-chain-preserving settlement record admissible by downstream consumers without a third-party witness. The marketplace operator's role is structurally limited to discovery, matching, and dispute-escalation authority, with no custody of the data and no structural capability to monetize beyond cost recovery. The architectural fact that the marketplace cannot capture the data is the architectural fact that satisfies DGA Article 12 neutrality, and because the disclosed marketplace operator is an optional, governance-credentialed intermediary service rather than a privileged owner of the substrate, the neutrality is structural rather than contractual.
The governance-chain trust substrate underpinning the marketplace binds each settlement to identity (the credentialed sensor-deployer and the credentialed data-consumer), authority (the regime under which each is credentialed: Data Act data holder, DGA data intermediation service, GDPR controller, IDS-RAM connector, Gaia-X federation member), jurisdiction (the legal forum in which the settlement is admissible), time (a mesh-derived temporal anchor), and content (the data payload, hashed and chained). Cross-jurisdiction settlements admit through declared international federation: an EU-domiciled sensor-deployer trading with a U.S.-domiciled data-consumer produces a chained settlement with EU-jurisdiction admissibility under the Data Act and U.S.-jurisdiction admissibility under FTC Section 5, without rebuilding evidence at each side.
Data-quality attestation, data-provenance tracking, and per-record consent are first-class chained content. Each data record carries attested provenance, the device that generated it, the firmware under which it was generated, the software bill of materials and configuration in effect at generation time, bound by signature to the record's chain entry. Each consent decision (initial collection, ongoing processing, third-party share under Data Act Article 5, withdrawal under GDPR Article 7) is a chain entry under the data-subject's authority. The data-consumer receives not just the data but the chained provenance and consent history, providing the basis for downstream lawfulness-of-processing analysis and for any FTC or supervisory-authority audit.
Compliance Mapping
EU Data Act Article 4 (user direct-access right) maps onto a settlement in which the data-holder is the seller, the user is the buyer, and the price is zero (free of charge under Article 4(1)). EU Data Act Article 5 (third-party sharing right) maps onto a settlement in which the data-holder is the seller, the user-designated third party is the buyer, and the FRAND-compliant price is set under the Article 9 reasonable-compensation framework. EU Data Act Article 6 (third-party use restrictions) maps onto chained content terms binding the third party not to use the data to develop competing products; violations are detectable as chain-content breaches.
EU DGA Article 12 neutrality is satisfied architecturally, the marketplace operator is structurally incapable of accessing the data payload beyond what is required for facilitation, because the substrate is pair-settled rather than custodial. DGA Article 11 (notification regime for data intermediation services) is satisfied procedurally with the operator's notification to the competent authority; the architectural primitive supplies the supporting evidence that neutrality is structural, not procedural. IDS-RAM connector identity, Gaia-X federation membership, and Catena-X / Manufacturing-X / Mobility Data Space participation are all credentialing authorities recognized within the governance-chain trust substrate.
U.S. compliance maps similarly. CPRA's right-to-know, right-to-delete, right-to-correct, and right-to-limit-use-of-sensitive-personal-information are chain-entry primitives under the data-subject's authority. FTC Section 5 deception analysis is supportable by direct query against the chained provenance and consent history. The Texas Data Privacy and Security Act's data-broker registration regime, the Colorado Privacy Act's universal-opt-out-mechanism requirement, and the emerging federal proposals (APRA, ADPPA successors) all reduce to additional credentialing authorities within the same substrate.
Adoption Pathway
Adoption proceeds in three phases. Phase one establishes the trust substrate. The marketplace operator registers itself as a facilitating authority, registers participating sensor-deployers as data-holder authorities (under Data Act terminology), registers participating data-consumers as buyer authorities, and registers the relevant regimes (Data Act, DGA, GDPR, CPRA, FTC Section 5, IDS-RAM, Gaia-X) as content-class authorities. Existing bilateral data agreements are migrated as initial chain entries, with attested provenance reconstructed where possible.
Phase two integrates the governance-chain trust substrate into the live data-emission path. Each connected device, at firmware-release time, is provisioned with the credentials necessary to produce attested provenance for each data record it emits; each Article 4 user-access settlement and each Article 5 third-party-share settlement traverses the marketplace as a pair-settled bilateral exchange grounded in chained provenance. The marketplace operator's role is reduced to discovery, matching, and dispute resolution under explicit, FRAND-compliant terms.
Phase three extends the marketplace into emerging frameworks: Catena-X automotive data exchange, Manufacturing-X industrial data exchange, the Mobility Data Space, the European Health Data Space (Regulation (EU) 2025/327), and U.S. sectoral regimes as they emerge. Each new framework is admitted as a new credentialing authority within the existing trust substrate; the pair-settled bilateral exchange model accommodates without rebuild, because the disclosed marketplace primitive is commodity-class-agnostic and admits per-deployment parameterization of commodity schema, pricing mechanism, licensing framework, and authority taxonomy without architectural modification. The same primitive that settles a single Article 5 telematics share also settles observation, capacity, energy, spectrum, compute, and attestation exchanges; an IoT-data deployment is one governance-policy configuration of a substrate that serves heterogeneous markets. The marketplace becomes a substrate for IoT data monetization across regulatory regimes, with structural neutrality as its load-bearing architectural commitment.
Disclosure Scope
The Governed Marketplace primitive and the matched-pair settlement primitive on which it relies are disclosed in U.S. Provisional Application No. 64/049,409. This article is an enabling, dated public disclosure of the application of those inventions to IoT data monetization under the EU Data Act, the EU Data Governance Act, IDS-RAM, Gaia-X, and the comprehensive U.S. state privacy regimes. The regulatory framing, the named data spaces, and the named sectoral exchanges are external to the disclosure and are described here to situate the invention; the mechanisms attributed to the marketplace, governance-chain-preserving bilateral settlement, credentialed participant admission, contributor-controlled licensing, regulatory-audit lineage records, optional governance-credentialed intermediary services, and commodity-class-agnostic parameterization, trace to that disclosure. No throughput, pricing, or volume figures are claimed beyond what the disclosure supports.
