Article 20 of the GDPR: Right to Data Portability

Article 20 of the GDPR Explained

This right applies:

• When processing is based on consent or the performance of a contract;
• And it is carried out by automated means.

The data subject can:

• Obtain the data they have provided (including actively or through observation of their behaviour);
• Receive it in a readily reusable format;
• Transmit it to another service (if technically possible).

Why is this article important for your GDPR compliance?

This right strengthens the freedom of choice and competition between digital services. It allows users to change providers without losing their data. Failure to comply with it can hinder individuals' mobility and lead to penalties.

How to Comply with GDPR Article 20

• Provide users with a data download tool in a standard format (e.g., CSV, JSON).
• Document the types of data concerned and the transfer procedure.
• Verify that your systems are interoperable with other platforms.
• Respond to requests within one month.

Practical Applications of GDPR Article 20

• A streaming platform allows users to export their viewing history and preferences.
• A mobile operator provides its customer with their invoices and usage data in a readable file.
• A bank offers an export of all transactions and personal data from the secure client area.

Related Resources

• Official text of the GDPR – EUR-Lex
• Practical guides from the French supervisory authority
• European portal for data protection

Accelerate your compliance in a few clicks

• Automate your compliance with our GDPR software
• Supported or outsourced by our DPO experts
• Train your teams with our GDPR e-learning

👉 Request a demo with an expert

⚡ Assess your situation in 15 minutes with our free, no-obligation GDPR self-assessment:

👉 GDPR: Self-assess now