DataTerminology.comNEW
Also known as: Data Portability Right
A data subject’s right and the capability to obtain and transfer their data in a structured, commonly used, machine-readable format.
DESCRIPTION
Data portability promotes user control and competition by enabling movement of personal data between controllers and services. Under GDPR Article 20, subjects can receive their provided data and transmit it to another controller. Implementations require standardized formats, secure transfer, and identity verification. Organizations must design export features and APIs that respect scope and security.
ALTERNATIVE DEFINITIONS
General Data Protection Regulation (EU)
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Authoritative legal articulation of the GDPR right of data portability.
UK Information Commissioner’s Office
The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
Plain-language explanation focusing on practical reuse across services.
RELATED TERMS
Right of Access Interoperability GDPR Data Subject Rights Data Export Machine-Readable Format Data Sharing
COMPETING TERMS
Vendor Lock-in
KNOWLEDGE AREAS
Data Privacy & Compliance Data Governance AI Governance
TARGET AUDIENCE
Data Governance Manager Chief Data Officer Chief Information Officer Data Steward Data Management Consultant
EXTERNAL SOURCES
- Wikipedia - Data portability
- European Data Protection Board - Guidelines on GDPR data portability
- Google Developers - Developer guidance for account data portability
TOP QUESTIONS
What data falls under Data Portability in GDPR?
Data a subject has provided to a controller, including data actively supplied and observed, where processing is based on consent or contract and carried out by automated means.
Category: Scope
Why is Data Portability important for users?
It empowers users to switch providers, combine services, and control their information. It reduces lock-in and fosters competition and innovation.
Category: Relevancy
How should organizations implement Data Portability?
Provide exports in structured, commonly used, machine-readable formats with secure download or direct transfer, after verifying identity.
Category: Implementation
What are common mistakes with Data Portability?
Over-including third-party or derived data, weak identity checks, and non-standard formats that hinder reuse are frequent errors.
Category: Mistakes
Does Data Portability apply to derived or inferred data?
Generally no. It primarily covers data provided by the data subject and observed data, not controllers’ derived analytics.
Category: Scope
What formats are suitable for Data Portability exports?
JSON, CSV, XML, and other open, machine-readable formats that preserve semantics and are commonly used.
Category: Standards
How does Data Portability relate to interoperability?
Portability enables transfer; interoperability ensures receiving systems can meaningfully ingest. Both are necessary for practical switching.
Category: Concept
What risks arise when implementing Data Portability?
Unauthorized access if identity verification is weak, data leakage during transfer, and format misinterpretation are key risks.
Category: Risks
Is Data Portability required outside the EU?
Similar rights exist in UK GDPR and some other jurisdictions. Requirements vary by law; check local regulations.
Category: Compliance