DPO SchoolDPO School

Art. 20 GDPR · Chapter III: Rights of the data subject · Section 3: Rectification and erasure

Article 20 GDPR: Right to data portability

Text as of 28 October 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026

Summary (not the official text)

Where processing is based on consent or contract and carried out by automated means, the data subject has the right to receive the personal data he or she provided in a structured, commonly used and machine-readable format and to transmit them to another controller. Where technically feasible, the data subject may have them transmitted directly from one controller to another.

Official text

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and

the processing is carried out by automated means.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

Article 20 on EUR-Lex

Text as of 28 October 2026.

This is reference material, not legal advice.

This list is under review.

EDPB guidance