Title page
Contents
Mapping approaches to data portability 7
Sectoral scope 8
Beneficiaries 10
Data subject to data portability arrangements 11
Legal obligation and enforcement action 14
Operational modality 15
Data portability opportunities and challenges 18
Increasing competition and consumer choice 18
Facilitating personal data flows and enabling informational self determination 20
Adoption and technical implementation challenges 22
Annex. Selection of data portability initiatives in the private and public sector 27
Data Portability 1.0: Ad hoc data downloads 27
The midata initiative of the United Kingdom 27
Private sector initiatives 28
Data Portability 2.0: Ad hoc direct transfers of data to another data holder 29
Health Insurance Portability and Accountability Act (HIPPA) in the United States 29
The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) 30
The "Right to Data Portability" (Art. 20) of the GDPR 31
The regulation for the free flow of non-personal data of the European Union 32
Canada's proposed Consumer Privacy Protection Act 33
Quebec Private Sector Act 34
The Regulation of Electronic Commerce and Efforts Regarding Competition in the Republic of Türkiye 35
Brazil's General Data Protction Law - Lei Geral de Proteção de Dados Pessoais 35
Singapore's data protection obligation 36
Selected private sector initiatives 37
Data Portability 3.0: Real-time continuous data transfers enabling interoperability 39
Early sectoral developments in the United States: From data portability 1.0 to 3.0 39
Japan's Banking Act 40
Payment Service Directive for Payment Businesses in the European Union (PSD2) 41
The Digital Markets Act of the European Union 42
The Data Act of the European Union 44
Interoperability in Estonia - X-Road 45
The Australian Consumer Data Right 45
Türkiye efforts in open banking 47
Private sector initiatives 47
Bibliography 49
Table 1. EU legal frameworks for data portability and sharing 9
Figure 1. Data products and the different ways data originate 13
Boxes
Box 1. Data portability as (ex post) competition enforcement remedy 7