The GDPR right of individuals to receive their personal data in a structured, common format and to transmit it to another provider.
Article 20 of the GDPR lets people obtain the personal data they provided to an organization in a machine-readable format, and where feasible have it sent directly to another controller. It applies to processing based on consent or a contract and carried out by automated means.
The right is designed to reduce lock-in and give individuals more control. Meeting it requires export functions and clear scoping of which data qualifies.
Related frameworks
KaitoSec