Right to Data Portability
A data subject's right to receive their personal data in a structured, machine-readable format and to transfer it to another controller.
Full Definition
The Right to Data Portability (Article 20 GDPR) gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used, machine-readable format, and to transmit that data to another controller. This right applies only where processing is based on consent or contract performance, and carried out by automated means. The goal is to empower individuals to switch between services and reuse their data. In practice, this requires organisations to have export capabilities and defined data formats. The CCPA's right to know overlaps partially, and India's DPDP Act includes a related right to access data in a digital format.
Related terms
Right to Access
A data subject's right to obtain confirmation of whether their personal data is being processed and to receive a copy of it.
DSAR
Data Subject Access Request — a formal request from an individual to access the personal data an organisation holds about them.
Data Subject
An identified or identifiable natural person whose personal data is being processed.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.