Right to Data Portability – art. 12, 20

A data subject has the right to move, copy, or transfer personal data from one data controller to another, in a safe and secure way, in a commonly used and machine-readable format.

Wherever technically possible, this also includes the right to have the data transferred directly from one controller to another without the data subject having to handle the data.

Implement a process and the technical capabilities to:

  • track all data relating to requester in your systems,
  • vet a right to data portability request,
  • transfer data to another controller or else the requester securely, and
  • confirm the transfer to the requester.