Records Management & Information Governance
- Records Management and Information Governance
- Data Protection
- Individuals' rights
- Right to data portability
Right to data portability
Under the GDPR, an individual has the right to receive a copy of any personal data provided by him/her to the University in a structured, commonly used and machine-readable format (e.g. CSV).
The following categories of data are subject to the right to portability:
- data processed on the basis of consent (Article 6 (1) (a)) or explicit consent (Article 9 (2));
- data processed on a contract (Article 6 (1) (b);
- data processed by automated means;
Where technically feasible, the University will transfer the data directly to another controller on request of the data subject. Where the University is unable to comply with this duty, the subject will need to arrange his/her own transfer.
Information will be provided free of charge.
If you would like to access your right to portability, please contact dataprotection@york.ac.uk.
Once requested, the University will respond to the request without undue delay and within one month. Where the request is complex or the University has received a number of portability requests, the timeframe may be extended by a further two months. The University will notify the requesting party within one month of original receipt of the request of the extension and explain why the extension was necessary.
Where the University decides not to action the request for data portability, it will write to the applicant and explain its decision. The communication will also outline the subject’s right to complain to the supervisory authority and to a judicial remedy without undue delay.