In Part I of the book, I designed a data commodification spectrum, based on dataspecific commodification indicia. In Parts II and III respectively, I used the spectrum to identify how the Data Act and the DGA (together, EU data legislation) and the GDPR engage with data commodification or, in other words, to what extent and how they commodify data. On the one hand, I found that both the Data Act and the DGA display a high level of consistency between them. I clustered them both (EU data legislation) between the efficient and the fair data market paradigms, and especially fair data distribution under the latter paradigm. In the parlance of Radin, EU data legislation pursues a ‘negative liberal approach‘ in the sense that data markets constitute the only principle. Limitations to data commodification are laid down but within market framework and values and without a positive approach, which, according to Radin, offers a slippery road to complete data commodification.

On the other hand, I clustered the GDPR on the data commodification spectrum, with a focus on data control, which EU data legislation features as a bridge between data markets and data protection or, in other words, for the compatibility model of EU data legislation.