The right to data portability

This right assures that YOU remain in full control of YOUR data. Data portability allows you to obtain and electronically move, copy or transfer your data in a secure manner, for further use. It enables the free flow of your personal information across the internet and organizations, according to your preference. This is important especially now that several organizations and services can reuse the same data.

Data portability allows you to manage your personal data in your private device, and to transmit your data from one personal information controller to another. As such, it promotes competition that fosters better services for the public.

Example

In case you want to close your Facebook account and leave the service, or simply feel like you’ve shared a lot of information about your life and want a backup of all your Facebook data, you may exercise your right to data portability.

You may also exercise this right if you intend to get a usable copy of your personal health records for the use of other doctors you may like to consult. In banking, the right to data portability may be used to reduce the risks of being locked-in with one single service provider, thereby expanding customers’ options and improving customer experience.

How to exercise your right to data portability

Various online platforms have been making data portability an available and instant option for its users. For instance, Facebook enabled its users to readily download all their personal content and information, including wall posts, status updates, photos, videos, and conversation threads. Currently, users will just have to click at the top right of any Facebook page and select “Settings”, then click “Download a copy of your Facebook data” at the bottom of “General Account Settings”, and click “Start My Archive”. Google has a similar feature that readily allows its users to create an archive to keep for their personal record or for use in another service.

In case the personal information controller concerned does not yet have an online data portability feature, you must execute a written request to the organization, addressed to its Data Protection Officer (DPO), and have it received. In the letter, mention that your request is being made in exercise of your right to data portability under the Data Privacy Act of 2012. Documents to support your request must be attached. The DPO must act on your written request. In case you feel your request have not been addressed satisfactorily, you may file a formal complaint before the NPC, attached therewith your request letter to the DPO.