Data Portability

Anyone who uses an online service leaves behind a lot of information there. With a music service, that’s your own playlists; with a social network, it’s photos and messages; with a fitness tracker, it’s your recorded running routes. Data portability means: this information belongs to the user, and they can take it with them. They may download it as a file or pass it directly to another provider. The word comes from the Latin portare, meaning to carry. What is meant is the ability to not have to leave your digital past behind when you switch services.

Why users otherwise get stuck

Without data portability, an effect emerges that experts call lock-in: you stay with a provider because switching would be too costly. Not costly in euros, but in lost effort. Someone who has maintained playlists for ten years is reluctant to switch streaming services if it means losing everything. The provider then doesn’t even need to be better than the competition. It’s enough that it holds onto the data.

That’s exactly why data portability is also a competition policy issue, not just a data protection issue. New providers have a hard time if customers can’t bring their history with them. Regulators in the EU and the US see this as one reason why some large platforms have held their position for so long. When switching becomes easy, the pressure on established players to actually deliver good service increases.

For AI services, the topic is currently gaining new significance. A chatbot that you’ve used for months knows preferences, previous questions, and saved notes. Whether and how this accumulated context can be taken to another provider is, for the most part, still unresolved.

From the export button to direct transfer

The simplest form is downloading. The service packages your data into a file, usually as a ZIP archive, and the user downloads it. The file format matters here. A stack of PDF documents is readable but hard for a machine to process further. What’s needed instead are structured formats like CSV or JSON, where each piece of information is clearly labeled. Only then can another provider automatically read in the data.

The second form is direct transfer from provider to provider. Here, two systems communicate with each other via an interface, that is, a defined technical language for exchanging data. The user grants permission once, and the servers handle the rest. This is exactly what the European General Data Protection Regulation mandates, insofar as it is technically feasible.

There are limits, however. The right only applies to data that you yourself provided or that arose from your use of the service. You cannot take with you what the provider has calculated from it, such as an internal customer profile or a recommendation score. Other people’s data is also delicate: a chat history always contains the other party’s messages too.

From tax returns to switching phones

In everyday life, you encounter data portability more often than the unwieldy term suggests. Almost every major platform has a feature in its settings like Download your data. When switching from an Android phone to an iPhone, contacts and photos are transferred. When switching banks, there’s an account-switching service that carries over standing orders. Health data, too, is meant to be able to move between practices and clinics in the future.

In business news, the term usually comes up in connection with regulation. The EU’s Digital Markets Act obliges especially large platforms to make data portability easy, and in some cases even to open up their messengers to others. The Data Act extends this to machines and connected devices, such as the sensor data of a car or a tractor.

A common misconception is that data portability means deleting the data at the old provider. That is a different right, the right to erasure. Anyone who wants both must request both: first export, then have it deleted.