Session data belongs to the driver, not just the back office
Charge point operators already log energy delivered, timestamps and cost per session for billing. The Data Act gives drivers and fleets a standing right to that same data — exportable, and shareable with a fleet platform or billing-reconciliation service of their choosing.
Price transparency and data access are two different duties
The AFIR requires transparent pricing at the point of charging. The Data Act has separately applied generally since 12 September 2025 and covers what happens to the session data afterward.
| Requirement | Status on review date | What it means for a charge point operator |
|---|---|---|
| Driver/fleet access-on-request | Binding since 12 September 2025 | Provide an authenticated request path for session, energy and cost data already logged |
| Driver/fleet-directed third-party sharing | Binding since 12 September 2025 | Support routing session data to a fleet platform or billing-reconciliation service the user names |
| Pre-contract data transparency | Binding since 12 September 2025 | Disclose what session data is captured, in what format, before the charging contract is agreed |
| Accessible by-design architecture | Applies to chargers placed after 12 September 2026 | New charge point platforms should ship the access API as a core feature |
Usually in scope
- Session start/stop timestamps and duration
- Energy delivered per session (kWh)
- Connector and charger status
- Cost charged for the session
- Driver-linked session history, subject to GDPR
Usually outside Chapter II
- Dynamic pricing / tariff-optimization algorithms
- Cross-site load-balancing and grid-services optimization logic
- Cross-operator roaming-network aggregate analytics
- Data never captured or retained by the charge point management system
| Field group | Typical source | Delivery format |
|---|---|---|
| Session start/stop & duration | Charge point controller, ISO 15118 session handshake | Structured export per session, CSV/JSON |
| Energy delivered (kWh) | Meter reading at connector | Interval or per-session export |
| Connector/charger status | Charge point management system heartbeat | Status API for availability and fault state |
| Session cost | Billing engine | Structured export linked to session ID |
From billing-only telemetry to a driver-facing access layer
Charge point management systems already capture everything needed for billing. The access layer is what turns that internal billing feed into something a driver or fleet platform can request and receive on their own terms.
Today: a closed loop
Product
EV charging station
Backend
Charge point operator cloud
- Session start/stop & duration
- Energy delivered (kWh)
- Connector/charger status
- Session cost
Only exit
Manufacturer's own app
- No user-facing export or API
- No route for the user to authorize a third party
- No permissions model, so every request is a one-off exception
- No audit trail if a user or regulator asks what was shared
With a Data Act access layer
Product
EV charging station
Backend
Charge point operator cloud
- Session start/stop & duration
- Energy delivered (kWh)
- Connector/charger status
- Session cost
New layer
Data Act access layer
- Field catalog
- User & device entitlements
- Consent & grant registry
Customer export & portal
CSV/JSON, self-service, same quality as the manufacturer sees
Third-party API (OAuth)
Purpose-bound grant to a repairer, analytics or energy provider
Audit & compliance log
Request, decision, recipient and delivery evidence for review
What we implement, concretely
A charging-session API, energy and cost data export, third-party sharing and an audit layer — built on top of your existing charge point management system.
| Capability | What it does |
|---|---|
| Charging-session data API | Authenticated access to per-session energy, timestamps, status and cost |
| Energy usage & cost export | Scheduled or on-demand CSV/JSON export sized for fleet billing reconciliation |
| Charger status feed | Structured connector/charger status stream separate from session records |
| User export & external-service access | Self-service driver export plus purpose-bound OAuth grants to fleet or billing platforms |
| Entitlement & audit layer | Driver/fleet/roaming-aware access control with a reviewable decision log |
Trace the billing pipeline
Map every field from charge point controller through management system to billing, and classify raw vs. derived.
Model entitlements across roaming
Resolve overlapping claims between charge point operator, e-mobility service provider, fleet operator and driver.
Design the driver/fleet API
Define catalog, request, third-party grant and delivery endpoints separate from internal billing APIs.
Build the decision engine
Turn catalog, entitlement, GDPR and trade-secret checks into explainable allow, partial and refuse outcomes.
Ship export and streaming
Deliver historical session export and, where useful, near-real-time status for active sessions.
Test the edge cases
Run through roaming sessions, fleet reassignment, V2G sessions and disputed pricing-algorithm requests.
EV charging station Data Act FAQ
Doesn't AFIR already cover charging data transparency?
Not the same obligation. AFIR requires ad hoc price transparency and easy payment at the point of charging — what a driver sees before and during a session. The Data Act is a separate, ongoing right to access and export the session data a charger generates after the fact, and to direct it to a third party such as a fleet platform or billing-reconciliation service. A compliant charge point operator needs both: transparent pricing at the plug, and a durable access API behind it.
For a company car, does the fleet manager or the individual driver hold the access right?
It depends on who the Data Act treats as the user for that vehicle — typically whoever has the contractual relationship establishing use of the charging service, which in a fleet context is often the fleet operator, with the driver's personal data inside those sessions still protected under GDPR. Model both relationships explicitly: a fleet-level entitlement to operational session data, and driver-level protection for anything personally identifying within it.
Can we withhold our dynamic pricing algorithm as a trade secret?
The algorithm itself, generally yes, through the Act's structured trade-secret process — proposing proportionate confidentiality measures and documenting the decision. The session-level output of that algorithm, meaning the price actually charged for a specific session, is a different matter: it's a normal part of the session record a driver is entitled to see, not the pricing logic that produced it.
How does charging-network roaming affect who the data holder is?
Roaming means a driver can charge at a station operated by one company through a contract with another (an e-mobility service provider), which creates two candidate data holders for the same session. Resolve this in the roaming agreement: decide up front which party owns the pre-contract disclosure and the access-request handling for sessions initiated through roaming, rather than leaving a driver's request to bounce between two operators.
Is V2G (vehicle-to-grid) energy-flow data in scope?
Yes, where the charger or the vehicle generates it as product or related-service data. Bidirectional energy flow, timing and volume during a V2G session are operational data the driver or fleet operator can reasonably request, on the same terms as one-directional charging-session data — this is a growing area as V2G deployments increase, so build the catalog to accommodate it rather than assuming charging is always one-directional.
Do we need to support bulk export of a fleet's whole billing period?
Where that's the readily available data relevant to the request, yes — a fleet operator reconciling a month of charging costs across dozens of vehicles has a legitimate access-on-request claim to that full period, not just the most recent session. Build export with date-range and multi-vehicle filtering in mind from the start rather than a single-session-at-a-time API that a fleet customer immediately outgrows.
Primary sources and status
Reviewed 9 September 2026. The Data Act, GDPR and AFIR are binding EU regulations. The Commission FAQs are non-binding implementation guidance. ISO 15118 is cited as technical context, not as a legal source. Yarify's API contract, entitlement model and delivery sequence are engineering recommendations, not legal advice.
- Regulation (EU) 2023/2854 — the EU Data ActBinding legal text covering connected-product data access, third-party sharing, fair terms and transitional dates
- Regulation (EU) 2016/679 — the General Data Protection RegulationBinding data-protection rules that govern any driver-linked charging-session record
- Regulation (EU) 2023/1804 — the Alternative Fuels Infrastructure Regulation (AFIR)Binding EU regulation requiring ad hoc price transparency and payment options at public charging points
- European Commission — Data Act FAQs, version 1.4Non-binding implementation FAQs covering scope, roles, access, trade secrets, compensation and cloud switching
