Datenportabilität

Datenportabilität, also known as the right to data portability, is a principle that allows individuals to obtain and reuse their personal data for their own purposes across different services. This means that individuals have the right to receive personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. They also have the right to transmit that data to another controller without hindrance from the controller to whom the personal data have been provided.

This concept is a key component of modern data protection regulations, most notably the General Data Protection Regulation (GDPR) in the European Union. The GDPR's Article 20 specifically outlines the requirements for data portability. The aim is to empower individuals by giving them greater control over their data and to foster competition among service providers by making it easier for users to switch between them.

The right to data portability applies to personal data processed on the basis of consent or for the performance of a contract, and where the processing is carried out by automated means. It does not apply to data that is not processed automatically or to data that is not provided by the individual, such as inferred data. When exercising the right to data portability, individuals can also request that their personal data be transmitted directly from one controller to another, where technically feasible. This facilitates seamless transitions and reduces the burden on individuals to manage their data across various platforms.