The right to data portability gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits this data directly to another controller.
The right to data portability only applies when:
- your lawful basis for processing this information is consent or for the performance of a contract; and
- you are carrying out the processing by automated means (ie excluding paper files).