Data Subjects can request data portability when the processing of their personal data is based on their consent or is necessary for the performance of a contract to which they are a party, and when the processing is carried out by automated means. This right allows individuals to obtain their personal data in a usable format and transfer it to another service provider or Controller, enhancing individual control over personal data.

The personal data must be provided in a structured, commonly used, and machine-readable format. This ensures that the Data Subject can easily re-use the information or transfer it without technical barriers. The format must allow interoperability, and where feasible, the transfer should be facilitated directly between Controllers upon the Data Subject’s request.

Yes. Data Subjects have the right to request that their personal data be directly transmitted from one Controller to another, where technically feasible. This supports seamless switching between service providers and reduces data lock-in. However, the transmitting Controller is not obligated to adopt incompatible systems to meet the request technical feasibility is a condition.