Right to Data Portability
The right to data portability under Article 20 GDPR allows data subjects to receive their personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller. It applies where processing is based on consent or a contract and is carried out automatically, but not where processing is in the public interest.
In practice
In practice, the right to data portability most often concerns customer accounts at online shops, fitness apps or social networks, when users want to move to a different provider. Controllers must supply the data in a common format such as CSV or JSON and, where technically feasible, transmit it directly to the new provider. For companies this means keeping export functions for customer data available and handling requests promptly; unlike the right to erasure, this is not about removing data but about taking your own data with you.