What is the right to data portability?
The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.
When does the right to data portability apply?
The right to data portability only applies when:
- Our lawful basis for processing this information is consent or for the performance of a contract; and
- We are carrying out the processing by automated means.
How will you provide the data?
We will provide your personal data in a structured, commonly used and machine readable format, such as CSV, XML or JSON. This will put your data into a format which can be automatically read by a computer, making it easier for other organisations to use your data.
Can you transmit my personal data to another controller?
If it is technically feasible and does not adversely affect the rights and freedoms of others, we will transmit your data directly to another organisation.
How do I make a request and what does it cost?
From 25th May 2018, requests for data portability can be made verbally or in writing and will be free of charge, unless the request is manifestly unfounded or excessive. Any fee applied will be based on the administrative costs of complying with the request.
How long will it take to process my request?
We are required to provide you with you information within one month of receipt, although this can be extended by a further two months should your request be complex or numerous.
We will let you know within one month if there is expected to be a delay in dealing with your request and give you a reason for the extension. If we require proof of identification, the one month responding period will begin when your identity has been confirmed.
Can you refuse my request?
We can refuse to comply with a data portability request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature.
If we refuse to process your request, we will explain why and inform you of your right to complain to the Information Commissioner and to a “judicial remedy” within one month of receipt.