Definitions #
A formal application made by a data subject to a data controller to receive a copy of their personal data in a transferable format or to have it directly sent to another organization.
Technical An exercise of the data portability right under Article 20 of the GDPR, wherein the user asks for the delivery of personal data in a structured, commonly used and machine-readable format, possibly including a request for direct transmission.
Etymology #
Combination of data portability (see data portability right) and request from Middle English requesten, from Latin requaerere (to seek).
Collocations #
- file a data portability request 提交数据可携请求
- respond to a data portability request 回应数据可携请求
Real Business Examples #
- The user filed a data portability request with the online store to export purchase history for tax documentation.
- In response to a data portability request, the company provided a ZIP archive containing all user-generated content.
Register & Variants #
- Register: formal
- BrE/AmE: Used in GDPR compliance and privacy operations; formal register.
Synonyms & Antonyms #
- Synonyms: portability request, Article 20 request
- Antonyms: data erasure request (different purpose)
Common Errors #
- Treating every data subject access request as a data portability request A portability request must specifically ask for the personal data in a transferable format; general access requests do not automatically trigger the portability mechanism.
- Assuming controllers can ignore a portability request if the data seems not user-provided Even data observed from user activity (e.g., browsing history) can fall under 'provided' depending on interpretation; controllers should assess each request individually.
Confusable Terms #
- data subject access request vs data portability request
- An access request allows inspection or copies without necessarily requiring machine-readable transfer; a data portability request emphasises transferability and reuse.
Frequently Asked Questions
What is the deadline for responding to a data portability request??
Controllers usually have one month to respond, extendable by two more months if the request is complex or numerous; inform the requester of any extension.
Can a data portability request be made without a specific purpose??
Yes, the right is purpose-neutral; you do not need to give reasons, but the request must be clear about what data you want exported.