EU regulatory register · GDPR
Article 20Right to data portability
CELEX 32016R0679 · Read on 2026-08-18 · Chapter III
Short answer
1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-20 · Short answer as data · Official text
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
(a)
the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
(b)
the processing is carried out by automated means.
2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.
Follow-up questions
Other articles in this chapter
Related articles
Articles in other acts connected to this one, with the reason written against the text. The map is a route between acts, not an assessment.
- Analogous to · mutualDataförordningen · 4
The right to access data from a connected product runs parallel to the right to data portability, over a wider set of data.
CELEX 32023R2854 · 2026-08-18
Knowledge card
- Applies
- controller: Provide personal data processed by automated means on the basis of consent or contract in a structured, commonly used and machine-readable format, and transmit it to another controller where technically feasible.
- Risk if ignored
- critical
- What to do
- Provide personal data processed by automated means on the basis of consent or contract in a structured, commonly used and machine-readable format, and transmit it to another controller where technically feasible.
- Deadline
- Within one month of the request (Art. 12(3)).
card:eu:article:gdpr--art-20 · sha256 2e93b28d17b3 · Source: NovaCopilot
Risk, sanction and outcome
Art. 20 · controller
Risk: high · Sanction: administrative_fine, högst EUR 20 000 000 · Authority: Competent supervisory authority
Decisions applying the provision: none in the register
Full chain (JSON)
Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot
Judgments applying this article
2 judgments in the register cite the article in their text. DE 2
Source: NovaCopilot
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit