{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/20","url":"https://www.headlesslaw.com/gdpr/articles/20","title":"Article 20 — Right to data portability","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"5ee0451b46959756","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/20/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/20/versions/2016-05-04/rev/5ee0451b46959756","versions_url":"https://www.headlesslaw.com/gdpr/articles/20/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/20/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/articles/20.md","body_sha256":"a8e60c126242c5287491594136be68b495fdfc754278bc69b028dc42b363dc05"},"units":[{"locator":"gdpr/art/20","kind":"article","status":"in_force","label":null,"heading":"Right to data portability","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"gdpr/art/20/para/1","kind":"paragraph","status":"in_force","label":"1.","heading":null,"text":"The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:","marks":[],"revision":1,"text_hash":"ddae4dbb810fae48c063b35eef950f6ef1c577432d89d4fbd6d6ae57133b6e3e","reason":null},{"locator":"gdpr/art/20/para/1/pt/a","kind":"point","status":"in_force","label":"(a)","heading":null,"text":"the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and","marks":[],"revision":1,"text_hash":"fe0bca128aaca05fd421d4bc7bf1238113eb88056fc2bda8c7e2e7a4b49e0758","reason":null},{"locator":"gdpr/art/20/para/1/pt/b","kind":"point","status":"in_force","label":"(b)","heading":null,"text":"the processing is carried out by automated means.","marks":[],"revision":1,"text_hash":"ba63b402fc6fa5b7d7b5e9c6d437089d49f2c213355216c1c6501e018ed533b6","reason":null},{"locator":"gdpr/art/20/para/2","kind":"paragraph","status":"in_force","label":"2.","heading":null,"text":"In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.","marks":[],"revision":1,"text_hash":"170f622db8c7a49619e5c08aa097b5888bb24e74cfe2371461ce4d0da419ef50","reason":null},{"locator":"gdpr/art/20/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.","marks":[],"revision":1,"text_hash":"bbab0086b765fa28098edd1457407a4ebb08f77572a647fc791e0bdb3cd00885","reason":null},{"locator":"gdpr/art/20/para/4","kind":"paragraph","status":"in_force","label":"4.","heading":null,"text":"The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.","marks":[],"revision":1,"text_hash":"759aeb0e3f69bdab6093dc02f9cc0653e0cefdb7ade0dfed8adf6af56dd6b9c3","reason":null}],"markdown":"---\ntitle: \"Article 20 — Right to data portability\"\ntype: regulation\nlegal_status: in_force\nsource: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\nsource_retrieved: 2026-09-28\nshortTitle: \"Article 20 — Right to data portability\"\ninstrument_type: level1_regulation\nauthority: Commission\nbinding: true\nbinding_character: binding\nmica_level2: false\nlegal_basis: \"Regulation (EU) 2016/679\"\ninstrument: gdpr\ncelex: \"32016R0679\"\nregulation: GDPR\nregulation-full: \"Regulation (EU) 2016/679\"\narticle: 20\nstatus: in_force\nobject_id: eu.gdpr.legal_text.article.20\ntext_version: \"Consolidated version of 4 May 2016\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*\n\n1. <a id=\"p-1\"></a>The data subject shall have the right to receive the [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) concerning him or her, which he or she has provided to a [controller](https://www.headlesslaw.com/definitions/gdpr/controller), in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:\n\n    <a id=\"p-1-a\"></a>**(a)** the [processing](https://www.headlesslaw.com/definitions/gdpr/processing) is based on [consent](https://www.headlesslaw.com/definitions/gdpr/consent-of-the-data-subject) pursuant to point (a) of [Article 6(1)](6.md) or point (a) of [Article 9(2)](9.md) or on a contract pursuant to point (b) of [Article 6(1)](6.md); and\n\n    <a id=\"p-1-b\"></a>**(b)** the processing is carried out by automated means.\n2. <a id=\"p-2\"></a>In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.\n3. <a id=\"p-3\"></a>The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to [Article 17](17.md). That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.\n4. <a id=\"p-4\"></a>The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.\n\n***\n\n[Chapter III — Rights of the data subject](../chapters/iii.md) · [← Article 19](19.md) · [Article 21 →](21.md)\n"}