Understanding Data Portability

What is Data Portability?

  • Data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
  • It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.
  • It enables individuals to take advantage of applications and services e.g. finding a quote for car insurance using a well-known online provider, that can use this data to find them a better deal.
  • This only applies to information which an individual has provided to a controller (e.g. online car insurance provider).

What is the right to data portability?

This is what the ICO say:

The right to data portability gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits this data directly to another controller.

As an example, if you have written an initial assessment report on a client, it is about getting confirmation by consent from the client to be able to share this report to the specialist consultant who may be carrying out their surgery or another independent therapist who will require this information.

When does the right apply?

This is what the ICO say:

The right to data portability only applies when:

  • your lawful basis for processing this information is consent orfor the performance of a contract; and
  • you are carrying out the processing by automated means (i.e. excluding paper files).

What does the right apply to?

This is what the ICO say:

Information is only within the scope of the right to data portability if it is personal data of the individual that they have provided to you.

To find out more information please visit this ICO link:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/