Data Portability

The right to data portability (GDPR Article 20) allows individuals to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance. This right applies when: the processing is based on consent or a contract, and the processing is carried out by automated means. The data should be provided in formats like JSON, CSV, or XML. Where technically feasible, the individual can request that data be transmitted directly from one controller to another. This right promotes competition and user freedom by preventing vendor lock-in.