What is the right to data portability?
The right to data portability allows you to obtain and re-use personal data for your own purposes across different services.
It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.
When does the right to data portability apply?
The right to data portability only applies when:
- Our lawful basis for processing this information is consent or for the performance of a contract; and
- We are carrying out the processing by automated means.
How will you provide the data?
We will provide your personal data in a structured, commonly used and machine readable format, such as CSV, XML or JSON. This puts your data into a format which can be automatically read by a computer, making it easier for other organisations to use your data.
Can you transmit my personal data to another controller?
If it is technically feasible and does not adversely affect the rights and freedoms of others, we will transmit your data directly to another organisation.
How do I make a request and what does it cost?
From 25 May 2018, you can make requests for data portability verbally or in writing and will be free of charge, unless the request is manifestly unfounded or excessive. Any fee applied will be based on the administrative costs of complying with the request.
How long will it take to process my request?
We are required to provide your information within a month of receipt. However this period can be extended by a further two months if the request is complex or numerous.
We will let you know within a month if we expect a delay in dealing with your request and we will give you a reason for the extension. If we require proof of identification, the one month responding period will begin when your identity has been confirmed.
Can you refuse my request?
We can refuse to comply with a request if it is manifestly unfounded or excessive,. We can also take into account whether the request is repetitive in nature.
If we refuse to process your request, we will explain why. We will inform you of your right to complain to the Information Commissioner and to a “judicial remedy” within a month of receipt.