Consent and data rights

Data portability

A person's right to receive their data in a structured, machine-readable format and have it sent to another controller.

Under the GDPR, the right to data portability lets a data subject receive the personal data they provided to a controller in a structured, commonly used and machine-readable format, and have it transmitted to another controller where technically feasible. It applies when processing is based on consent or contract and carried out by automated means. Open banking and open finance schemes build on the same idea with dedicated APIs and security rules.

Agent Minute explains this term on 27 January 2027.

Related terms