I want to port my data from one provider to another. Is this my right?

What the Law Says

The right to data portability is set out in the UK General Data Protection Regulation (UK GDPR), which remains part of domestic law after Brexit. It gives individuals the right to obtain and reuse their personal data for their own purposes across different services.

This right applies when your personal data is processed based on your consent or a contract, and when the processing is carried out by automated means.

You can ask your provider to send your data directly to another provider — but only if this is technically feasible. Otherwise, they must give it to you in a structured, commonly used, and machine-readable format (e.g., JSON or CSV).

Organisations must respond to your request without undue delay and within one month (30 days) of receiving it. They cannot charge you a fee, unless the request is manifestly unfounded or excessive.

Statutory Text

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format...

— UK GDPR, Art. 20(1) — Right to data portability

Statutory Text

Where technically feasible, the data subject shall have the right to have the personal data transmitted directly from one controller to another.

— UK GDPR, Art. 20(2) — Right to data portability

Statutory Text

The controller shall provide the information without undue delay and in any event within one month of receipt of the request.

— UK GDPR, Art. 12(3) — Transparent information, communication and modalities

Sources