Data portability

<h2 id="development">Development</h2>
At the global level, there are proponents who see the protection of digital data as a human right. Thus, in an emerging civil society draft declaration, one finds mention of the following concepts and statutes: Right to Privacy on the Internet, Right to Digital Data Protection, Rights to Consumer Protection on the Internet – <a href="/facts/United_Nations_Guidelines_for_Consumer_Protection/IeLXXaBC">United Nations Guidelines for Consumer Protection</a>.<a class="footnote-ref" id="fnref:4" href="#fn:4">4</a>
At the regional level, there are at least three main jurisdictions where data rights are seen differently: China and India, the United States and the European Union. In the latter, personal data was given special protection under the 2018 <a href="/facts/General_Data_Protection_Regulation/RMLY6ohr">General Data Protection Regulation</a> (GDPR).
The GDPR thus became the fifth of the 24 types of legislation listed in Annex 1 Table of existing and proposed European Directives and Regulations in relation to data.<a class="footnote-ref" id="fnref:5" href="#fn:5">5</a>
Personal data are the basis for <a href="/facts/Targeted_advertising/SsSEgQlt">behavioral advertising</a>, and early in the 21st century their value began to grow exponentially, at least as measured in the market capitalization of the major platforms holding personal data on their respective users. European Union regulators reacted to this perceived power imbalance between platforms and users, although much still hinges on the terms of consent given by users to the platforms. The concept of data portability comprises an attempt to correct the perceived power imbalance by introducing an element of competition allowing users to choose among platforms.

<h3>Online platforms</h3>
With the advent of the <a href="/facts/General_Data_Protection_Regulation/RMLY6ohr">General Data Protection Regulations</a> (GDPR), <a href="/facts/Social_media_platform/kUIkfpIA">social media platforms</a> such as <a href="/facts/Twitter/VWwDNGUm">Twitter</a>, <a href="/facts/Instagram/33s91jnV">Instagram</a>, <a href="/facts/Snapchat/oIQ9tBh8">Snapchat</a>, and the <a href="/facts/Wall_Street_Journal/9Pkf2cYK">Wall Street Journal</a> online subscriber community have widely adopted the ability to export and download user data into a <a href="/facts/ZIP_file/qDrrYIB9">ZIP</a> <a href="/facts/Archive_file/u7BIXv7D">archive file</a>.<a class="footnote-ref" id="fnref:6" href="#fn:6">6</a> Other platforms such as <a href="/facts/Google/GT9Sugza">Google</a> and <a href="/facts/Facebook/0IhXFR6u">Facebook</a> were equipped with export options earlier.<a class="footnote-ref" id="fnref:7" href="#fn:7">7</a> Some platforms restrict exports with time delays between each, such as once per 30 days on Twitter, and many platforms lack partial export options.<a class="footnote-ref" id="fnref:8" href="#fn:8">8</a>
Other sites such as <a href="/facts/Quora/sdrkWzr6">Quora</a> and Bumble offer no automated request form, requiring the user to request a copy of their data through personal support <a href="/facts/Email/6pD9GLtI">email</a>.<a class="footnote-ref" id="fnref:9" href="#fn:9">9</a>

<h3>Ratings and reviews</h3>
Reputation portability refers to the ability of an individual to transfer their reputation or credibility from one context to another.<a class="footnote-ref" id="fnref:10" href="#fn:10">10</a><a class="footnote-ref" id="fnref:11" href="#fn:11">11</a> This concept is becoming increasingly important in today's interconnected world, where individuals are involved in multiple online and offline communities.
The idea behind reputation portability is that an individual's reputation should not be tied solely to a single community or platform.<a class="footnote-ref" id="fnref:12" href="#fn:12">12</a> Rather, it should be transferable across different contexts, such as professional networks, social media platforms, and online marketplaces. This enables individuals to maintain a consistent reputation across various contexts, which can be beneficial in terms of building trust, and overcoming the so-called "cold-start" problem,<a class="footnote-ref" id="fnref:13" href="#fn:13">13</a><a class="footnote-ref" id="fnref:14" href="#fn:14">14</a> and hence mitigating platform lock-in.
Overall, reputation portability is an important concept in today's digital landscape, and research has shown that imported reputation can serve as viable signals for building trust.<a class="footnote-ref" id="fnref:15" href="#fn:15">15</a><a class="footnote-ref" id="fnref:16" href="#fn:16">16</a><a class="footnote-ref" id="fnref:17" href="#fn:17">17</a> As technology continues to evolve, it is likely that reputation portability will become increasingly important in shaping how we interact with each other online and offline.

<h2 id="in-consumer-electronics">In consumer electronics</h2>
<h3>Mobile devices</h3>
Some <a href="/facts/Mobile_app/r7vp6meo">mobile apps</a> restrict data portability by storing user data in locked <a href="/facts/Directory_(computing)/VLtLcEXY">directories</a> while lacking <a href="/facts/Import_and_export_of_data/jtbFTcmQ">export</a> options. Such may include <a href="/facts/Configuration_file/DDzU0FLJ">configuration files</a>, <a href="/facts/Bookmark_(digital)/E4WpX0Ku">digital bookmarks</a>, <a href="/facts/Browsing_history/Ted9Hbx4">browsing history</a> and <a href="/facts/Session_(computer_science)/PRQuXhIL">sessions</a> (e.g. list of open <a href="/facts/Tabbed_browsing/YswKP5Mg">tabs</a><a class="footnote-ref" id="fnref:18" href="#fn:18">18</a> and navigation histories), watch and search histories in multimedia <a href="/facts/Streaming/4rPhSq0Y">streaming</a> apps, custom <a href="/facts/Playlists/dV3NlYS8">playlists</a> in <a href="/facts/Media_player_software/AwtCuWfG">multimedia player</a> software, entries in <a href="/facts/Note_taking/V27nB55K">note taking</a> and <a href="/facts/Memorandum/E8UmDYKR">memorandum</a> software, digital <a href="/facts/Phone_book/UKxnLfs1">phone books</a> (<a href="/facts/Contact_list/1S0UBN1w">contact lists</a>), call logs from the telephone app, and conversations through <a href="/facts/SMS/kacRfW0X">SMS</a> and <a href="/facts/Instant_messaging/8lwwDyjK">instant messaging</a> software.
Locked directories are inaccessible to an end-user without extraordinary measures such as so-called <a href="/facts/Rooting_(Android)/xbHXTjzA">rooting (Android)</a> or <a href="/facts/Jailbreaking_(iOS)/yJxsE1h9">jailbreaking (iOS)</a>.
The former requires the so-called <a href="/facts/Boot_loader/6sNpcLMK">boot loader</a> of the device to be in an unlocked state in advance, which it usually is not by default. Toggling that state involves a full erasure of all user data, known as the wipe, making it a <a href="/facts/Vicious_cycle/jGAJzfQX">vicious cycle</a> if the user's aim were to access their locked data.<a class="footnote-ref" id="fnref:19" href="#fn:19">19</a>
Other mobile apps only allow the creation of user data backups using <a href="/facts/Proprietary_software/9zcskxYL">proprietary software</a> provided by the vendor, lacking the ability to directly export the data to a local file in the mobile device's common user data directory. Such said software requires an external host computer to run on.<a class="footnote-ref" id="fnref:20" href="#fn:20">20</a><a class="footnote-ref" id="fnref:21" href="#fn:21">21</a>
Some device vendors offer <a href="/facts/Cloud_storage/cNw9IK3Q">cloud storage</a> and synchronisation services for backing up data. Such services however require registration and depend on internet connection and preferably high internet speeds and data plan limits if used regularly. Some services may only allow moving parts of the data such as text messages and <a href="/facts/Phone_book/UKxnLfs1">phone books</a> between locked directories on devices of the same vendor (<a href="/facts/Vendor_lock-in/BLndHDVl">vendor lock-in</a>), without the ability to export the information into local files directly accessible by the end user.<a class="footnote-ref" id="fnref:22" href="#fn:22">22</a><a class="footnote-ref" id="fnref:23" href="#fn:23">23</a>
Restrictions added in more recent versions of <a href="/facts/Operating_system/8XTuvMh2">operating systems</a>, such as <a href="/facts/Scoped_storage/55ooSorM">scoped storage</a>, which is claimed to have been implemented with the aim to improve user privacy, compromise both <a href="/facts/Backwards_compatibility/FbHFBu5y">backwards compatibility</a> to established existing software such as <a href="/facts/File_manager/t7CSQ40a">file managers</a> and <a href="/facts/FTP_server/THuWgzfw">FTP server</a> applications, as well as legitimate uses such as cross-app communication and facilitating large <a href="/facts/File_transfer/9qP8HDW8">file transfers</a> and <a href="/facts/Backup/ldV72CkU">backup</a> creation.<a class="footnote-ref" id="fnref:24" href="#fn:24">24</a><a class="footnote-ref" id="fnref:25" href="#fn:25">25</a>
Further possible restraints on data portability are poor reliability, stability and performance of existing means of data transfer, such as described in <a href="/facts/Media_Transfer_Protocol/4YoCgT8g">Media Transfer Protocol § Performance</a>.

<h3>Digital video recorders</h3>
Some <a href="/facts/Digital_video_recorder/g8V6BsU5">digital video recorders</a> (DVRs) which store recordings on an internal hard drive lack the ability to back up recordings, forcing a user to delete existing recordings upon exhausted disk space, which is an instance of poor data portability.
Some DVRs have an <a href="/facts/Operating_system/8XTuvMh2">operating system</a> that depends on an Internet connection to boot and operate, meaning that recordings stored locally are inaccessible if no internet connection is available. If service for the device gets deprecated by the television service provider, the existing recordings become inaccessible and thus considerably lost.<a class="footnote-ref" id="fnref:26" href="#fn:26">26</a><a class="footnote-ref" id="fnref:27" href="#fn:27">27</a>

<h3>Other appliances</h3>
<a href="/facts/Cordless_telephone/Y6PEsMk7">Cordless</a> <a href="/facts/Landline_telephone/11RD6Nff">landline telephone</a> units, as well as their associated base stations, which have <a href="/facts/Firmware/62UVKIUK">firmwares</a> with <a href="/facts/Phone_book/UKxnLfs1">phone book</a> and <a href="/facts/SMS/kacRfW0X">SMS</a> messaging functionality, commonly lack an interface to connect to a computer for backing the data up.

<h2 id="in-software">In software</h2>
Some software such as the <a href="/facts/Discourse_(software)/egNInRLo">Discourse</a> forum software offers a built-in ability for users to download their posts into an archive file.
Other software may operate locally, but store user data in a <a href="/facts/Proprietary_format/9j6BjD7t">proprietary format</a>, thus causing <a href="/facts/Vendor_lock-in/BLndHDVl">vendor lock-in</a> until successfully <a href="/facts/Reverse_engineering/pmJCV7J7">reverse-engineered</a> by third party developers.

<h2 id="by-country">By country</h2>
<h3>European Union</h3>
The right to data portability was laid down in the European Union's <a href="/facts/General_Data_Protection_Regulation/RMLY6ohr">General Data Protection Regulation</a> (GDPR) passed in April 2016. The regulation applies to data processors, whether inside or outside the EU, if they process data on individuals who are physically located within an EU member state.

<blockquote>Controllers must make the data available in a structured, commonly used, machine-readable and interoperable format that allows the individual to transfer the data to another controller.<a class="footnote-ref" id="fnref:28" href="#fn:28">28</a><a class="footnote-ref" id="fnref:29" href="#fn:29">29</a></blockquote>
Earlier the <a href="/facts/European_Data_Protection_Supervisor/KMQKNhNg">European Data Protection Supervisor</a> had stated that data portability could "let individuals benefit from the value created by the use of their personal data".<a class="footnote-ref" id="fnref:30" href="#fn:30">30</a>
The European-level <a href="/facts/Article_29_Data_Protection_Working_Party/AWxq3914">Article 29 Data Protection Working Party</a> held a consultation on this in English lasting until the end of January 2017.
Their guidelines and FAQ on the right to data portability contain this call for action:

<blockquote>WP29 strongly encourages cooperation between industry stakeholders and trade associations to work together on a common set of interoperable standards and formats to deliver the requirements of the right to data portability. This challenge has also been addressed by the <a href="/facts/European_Interoperability_Framework/w2jUlPWV">European Interoperability Framework</a> (EIF).</blockquote>
The French national data supervisor <a href="/facts/Commission_Nationale_de_l%2527Informatique_et_des_Libert%25C3%25A9s/J2lQFzwA">CNIL</a> hosted a discussion in French. Current participants offer opinions on how the legislation provides few benefits for companies, but many for users.<a class="footnote-ref" id="fnref:31" href="#fn:31">31</a>
In April 2017, new guidelines were published on the Article 29 Working Party website.<a class="footnote-ref" id="fnref:32" href="#fn:32">32</a>
In late 2019 the Data Governance Act was published by the Commission.<a class="footnote-ref" id="fnref:33" href="#fn:33">33</a>
In 2021 researchers, many of them French and Finnish, published a 46-page report covering the state-of-the-art.<a class="footnote-ref" id="fnref:34" href="#fn:34">34</a>
In 2022 the European Commission published the Data Act.<a class="footnote-ref" id="fnref:35" href="#fn:35">35</a>
Although the United Kingdom <a href="/facts/Brexit/M80B3fIg">voted to withdraw from the EU</a>, it intends to incorporate much of the GDPR in its own legislation, which will include data portability, as "...the GDPR itself contains some noteworthy innovations – for instance… the introduction of a new right to data portability".<a class="footnote-ref" id="fnref:36" href="#fn:36">36</a>
In November at the Internet Governance Forum 2019 in Berlin panelists reported that Article 20 GDPR is not actionable, neither legally nor technically.<a class="footnote-ref" id="fnref:37" href="#fn:37">37</a> In the UK—ironically post-Brexit—researchers are monitoring developments.<a class="footnote-ref" id="fnref:38" href="#fn:38">38</a>
<a class="footnote-ref" id="fnref:39" href="#fn:39">39</a><a class="footnote-ref" id="fnref:40" href="#fn:40">40</a>
Germany has called to strengthen the European Union's right to data portability using competition law. A commission was set up for the purpose of proposing improvements.<a class="footnote-ref" id="fnref:41" href="#fn:41">41</a>

<h3>Switzerland</h3>
Likewise, in Switzerland, a nation-state that is related to the EU only on a bilateral basis and as an <a href="/facts/EFTA/m8yeTInz">EFTA</a> member state, there has been a trend moving in the same direction. The Swiss view was officially published in March 2018 (as a document in PDF).<a class="footnote-ref" id="fnref:42" href="#fn:42">42</a>
An association proposed to have a right to data portability anchored in the constitution of the Swiss Confederation.<a class="footnote-ref" id="fnref:43" href="#fn:43">43</a> A law was passed that includes data portability; as described here in German <a class="footnote-ref" id="fnref:44" href="#fn:44">44</a>
and here in French.<a class="footnote-ref" id="fnref:45" href="#fn:45">45</a> The association partners with a cooperative called MIDATA.coop, which will offer users a place to store their data.<a class="footnote-ref" id="fnref:46" href="#fn:46">46</a>
A second association has issued its guideline on the topic.<a class="footnote-ref" id="fnref:47" href="#fn:47">47</a>
Over the longer term, the Swiss may have to consider that data portability is in the GDPR. Given that the GDPR will raise compliance costs for EU-based companies, it is unlikely that the EU would tolerate a situation with third-party countries in which Swiss companies would not be held to the same standard in order to keep competition fair. The legal terms involved are adequacy and reciprocity.<a class="footnote-ref" id="fnref:48" href="#fn:48">48</a>

<h3>United States, California</h3>
California has a Consumer Privacy Act (CCPA) of 2018, which introduces data portability to the USA.<a class="footnote-ref" id="fnref:49" href="#fn:49">49</a>

<h3>Canada</h3>
Canada anticipates a law in that it shows Transparency, Portability and Interoperability as Principle No. 4 of its Digital Charter.<a class="footnote-ref" id="fnref:50" href="#fn:50">50</a>

<h3>India</h3>
Data portability is included in the <a href="/facts/Personal_Data_Protection_Bill_2019/fcl3p6LC">Personal Data Protection Bill 2019</a> about to become law as section 26 in chapter VI.

<h3>Brazil</h3>
Data portability is included in the <a href="/facts/Privacy_law/MqQ3j0UU">Privacy law#Brazil</a> as its Article 18.<a class="footnote-ref" id="fnref:51" href="#fn:51">51</a>

<h3>Australia</h3>
In Australia, a <a href="/facts/Consumer_Data_Right/gK4uptLT">Consumer Data Right</a> has been proposed.<a class="footnote-ref" id="fnref:52" href="#fn:52">52</a>

<h3>Thailand</h3>
Data portability is included in the new law.<a class="footnote-ref" id="fnref:53" href="#fn:53">53</a>

<h3>Kenya</h3>
A right to data portability is enshrined in the new data protection law under clause 34.<a class="footnote-ref" id="fnref:54" href="#fn:54">54</a> However, the intentions behind the new law, its enforcement and relation to the government's new <a href="/facts/Identity_management/D4Ukft0T">Identity management</a> system have already been contested.<a class="footnote-ref" id="fnref:55" href="#fn:55">55</a>

<h2 id="requirements-for-effective-data-interoperability">Requirements for effective data interoperability</h2>
It is always tricky for legislators to regulate at the right level of precision, as everyone understands technology will evolve faster than the law. So far, only the European Union has formalized the expectations around data portability, requiring the data "in a structured, commonly used, machine-readable and interoperable format".
This touches on at least two distinct technical requirements for effective interoperability: 

<ul><li>the need to use file standards that allow for easy reuse (for instance CSV or JSON instead of PDF or even printed paper), encompassed by a "structured, commonly used, machine-readable" format.</li>
<li>the need (hinging on "interoperable") to consider not only an individual's data release on its own, but also in conjunction with other systems and other individuals' data releases from the same company. This hints at requirements regarding data schemas, versioning and specification of those schemas in case of frequent changes, and generally the absence of efforts on the part of the source data controller to complicate the effective interoperability downstream.</li></ul>
Likewise, European researchers stress that there are both practical and legal gaps that the EU should fill.<a class="footnote-ref" id="fnref:56" href="#fn:56">56</a>

<h2 id="rights-of-data-subjects-under-the-european-unions-new-gdpr">Rights of data subjects under the European Union's new GDPR</h2>
The list of these rights has grown.<a class="footnote-ref" id="fnref:57" href="#fn:57">57</a>

<h3>Data portability in relation to the right of access</h3>
The data portability right is slightly different from the <a href="/facts/Right_of_access_to_personal_data/QJy7ygAF">Right of access to personal data</a>; see <a href="/facts/GDPR/RMLY6ohr">GDPR</a> and the seventh item in the list cited immediately above. The right of access only mandates that the data subject gets to see their personal data. The old EU Data Protection Directive used to require explicitly in such cases for the data to be provided in "intelligible" form, which has been interpreted so far as "human readable". This requirement is still somewhat present in the EU's General Data Protection Regulation, but only implicitly in conjunction with <a href="/facts/Recital_(law)/FtHpfnSH">Recital (law)</a>. Since the right to portability is mostly concerned with reuse by other services (i.e. most likely automated), it could be that both "human readable" and "raw format" would be inappropriate for effective data portability. Some intermediate level might need to be sought.
In addition, the GDPR limits the scope of data portability to cases where the processing is made on the basis of either consent of the data subject, or the performance of a contract.

<h3>Data portability in relation to the right of explanation</h3>
The data portability right is related to the "<a href="/facts/Right_to_explanation/sePD8bBG">right to explanation</a>", i.e. when automated decisions are made that have legal effect or significant impact on individual data subjects. How to display an algorithm? One way is through a <a href="/facts/Decision_tree/XDVeGlkJ">decision tree</a>. This right, however, was found to be not very useful in an empirical study.<a class="footnote-ref" id="fnref:58" href="#fn:58">58</a>
The right to explanation is related to the "Right to not be evaluated on the basis of automated processing" shown as the last item in the list shown in Gabel / Hickman.<a class="footnote-ref" id="fnref:59" href="#fn:59">59</a> This includes decisions based on <a href="/facts/Profiling_(information_science)/RJCnk2Yg">profiling</a>. Such a right was included in the EU Data Protection Directive of 1995, but not much enforcement followed. An article in Wired emphasised the poignancy of the discussion.<a class="footnote-ref" id="fnref:60" href="#fn:60">60</a> The issue has been discussed by Bygrave,<a class="footnote-ref" id="fnref:61" href="#fn:61">61</a> and by Hildebrandt,<a class="footnote-ref" id="fnref:62" href="#fn:62">62</a> who claimed this to be one of the most important transparency rights in the era of machine learning and <a href="/facts/Big_data/XGtrVg4z">big data</a>. Contrary to Hildebrandt's high expectations in 2012, four years later, after many revisions to the GDPR, when the text was finalized, three other well-known authors contest whether a right to explanation still exists in the GDPR (see below).
In the United States there was a description of related developments in a seminal book by law professor Frank Pasquale;<a class="footnote-ref" id="fnref:63" href="#fn:63">63</a> the relevant passages were reviewed by the Electronic Privacy Information Center (EPIC).<a class="footnote-ref" id="fnref:64" href="#fn:64">64</a> Even the U.S. Defense Advanced Research Projects Agency DARPA has an <a href="/facts/Explainable_AI/dS566nb2">Explainable AI</a> (XAI) program<a class="footnote-ref" id="fnref:65" href="#fn:65">65</a>
cited critically by blogger Artur Kiulian.<a class="footnote-ref" id="fnref:66" href="#fn:66">66</a>
Several papers have been published on these topics in 2016, the first of which, by Goodman / Flaxman, outlines the development of the right to explanation.<a class="footnote-ref" id="fnref:67" href="#fn:67">67</a> Pasquale does not think the approach goes far enough, as he has stated in a blog entry at the <a href="/facts/London_School_of_Economics/L8SkGefj">London School of Economics</a> (LSE).<a class="footnote-ref" id="fnref:68" href="#fn:68">68</a> In fact at LSE there is a whole series on Algorithmic Accountability of which that was one entry in Feb. of 2016, and other notable ones were by Joshua Kroll and <a href="/facts/Mireille_Hildebrandt/fbCYlw9L">Mireille Hildebrandt</a>.<a class="footnote-ref" id="fnref:69" href="#fn:69">69</a>
Another 2016 paper, published by Katarinou et al., includes remarks on a right of appeal such that "individuals would have a right to appeal to a machine against a decision made by a human."<a class="footnote-ref" id="fnref:70" href="#fn:70">70</a>
A third 2016 paper, one co-authored by Mittelstadt et al., maps the literature and relates it to the GDPR on its pages 13–14.<a class="footnote-ref" id="fnref:71" href="#fn:71">71</a>
A fourth paper, one co-authored by Wachter, Mittelstadt and Floridi, refutes the idea that such a right might be included in the GDPR, proposes a limited 'right to be informed' instead and calls for the creation of an agency to implement the transparency requirement.<a class="footnote-ref" id="fnref:72" href="#fn:72">72</a> A further paper by Edwards and Veale claims such a right is unlikely to apply in the cases of the 'algorithmic harms' attracting recent media attention, and that insufficient attention has been paid to both the computer science literature on explanation and how other GDPR provisions, such as data protection impact assessments and data portability, might help.<a class="footnote-ref" id="fnref:73" href="#fn:73">73</a> Almost two years later a paper appeared that challenges earlier papers, especially Wachter / Mittelstadt / Floridi.<a class="footnote-ref" id="fnref:74" href="#fn:74">74</a>
On both sides of the Atlantic, there has been recent activity pertaining to this ongoing debate. Early in 2016 experts on artificial intelligence and UK government officials met during a number of meetings,<a class="footnote-ref" id="fnref:75" href="#fn:75">75</a> and developed a Data Science Ethical Framework.<a class="footnote-ref" id="fnref:76" href="#fn:76">76</a> On November 7, 2016 an event was held in Brussels, organized by MEP Marietje Schaake in the European Parliament and described by danah Boyd.<a class="footnote-ref" id="fnref:77" href="#fn:77">77</a> Only eleven days later at New York University there was a conference on "Fairness, Accountability, and Transparency in Machine Learning " where Principles for Accountable Algorithms and a Social Impact Statement for Algorithms were articulated and placed online for discussion.<a class="footnote-ref" id="fnref:78" href="#fn:78">78</a> By mid-December the IEEE came out with a document whose editing was backed up by public comments that were invited by March 2017 on "Ethically Aligned Design".<a class="footnote-ref" id="fnref:79" href="#fn:79">79</a>
Later in 2017 data portability was analysed by professors of data protection as a central innovation of the new GDPR.<a class="footnote-ref" id="fnref:80" href="#fn:80">80</a>

<h2 id="see-also">See also</h2>
<ul><li><a href="https://gdprhub.eu/index.php?title=Article_20_GDPR">External wiki</a> GDPR Hub maintained by Max Schrems et al.</li>
<li><a href="/facts/Data_Transfer_Project/dnljS1jM">Data Transfer Project</a></li>
<li><a href="/facts/Ethics_of_artificial_intelligence/u7H0AbEV">Ethics of artificial intelligence</a></li>
<li><a href="/facts/General_Data_Protection_Regulation/RMLY6ohr">General Data Protection Regulation</a></li></ul>
<h2 id="notes">Notes</h2>

<h2 id="references">References</h2>

<ol>
<li id="fn:1">"DataPortability.org - Share and remix data using open standards". DataPortability.org. 2009-07-23. Archived from the original on 23 July 2009. Retrieved 2022-05-16. <a href="https://web.archive.org/web/20090723171111/http://www.dataportability.org" target="_blank">https://web.archive.org/web/20090723171111/http://www.dataportability.org</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></li>
<li id="fn:2">Gideon, Thomas (2010-06-23). "Data Portability Policy – The Command Line". The Command Line. Archived from the original on 2021-10-23. Retrieved 2020-12-14. <a href="https://web.archive.org/web/20211023020934/https://thecommandline.net/2010/06/23/data-portability-policy/" target="_blank">https://web.archive.org/web/20211023020934/https://thecommandline.net/2010/06/23/data-portability-policy/</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></li>
<li id="fn:3">Cofone, Ignacio (2021). "Beyond Data Ownership". Cardozo Law Review. p. 507. <a href="https://cardozolawreview.com/beyond-data-ownership/" target="_blank">https://cardozolawreview.com/beyond-data-ownership/</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></li>
<li id="fn:4">"The Charter of Human Rights and Principles for the Internet Educational Resource Guide (v2) (Internet Rights and Principles Coalition)". 2017-10-20. Retrieved 2018-10-07. <a href="https://www.intgovforum.org/multilingual/content/the-charter-of-human-rights-and-principles-for-the-internet-educational-resource-guide-v2" target="_blank">https://www.intgovforum.org/multilingual/content/the-charter-of-human-rights-and-principles-for-the-internet-educational-resource-guide-v2</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></li>
<li id="fn:5">European Commission. Directorate General For Communications Networks, Content Technology; Osborne Clarke LLP (2016-11-28). Legal study on ownership and access to data: final report. Publications Office of the European Union. Publications Office. doi:10.2759/299944. ISBN 978-92-79-62181-9. Retrieved 2018-10-07. <a href="978-92-79-62181-9" target="_blank">978-92-79-62181-9</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></li>
<li id="fn:6">Gartenberg, Chaim (24 April 2018). "Instagram adds new data download tool to export pictures and user information". The Verge. <a href="https://www.theverge.com/2018/4/24/17276106/instagram-data-download-tool-export-privacy-gdpr-compliance" target="_blank">https://www.theverge.com/2018/4/24/17276106/instagram-data-download-tool-export-privacy-gdpr-compliance</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></li>
<li id="fn:7">Burgess, Matt (24 May 2018). "How Apple, Facebook and Google are changing to comply with GDPR". Wired UK. <a href="https://www.wired.co.uk/article/gdpr-facebook-google-analytics-apple-amazon-twitter" target="_blank">https://www.wired.co.uk/article/gdpr-facebook-google-analytics-apple-amazon-twitter</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></li>
<li id="fn:8">Canales, Katie (2018-04-24). "Instagram is rolling out a feature that will let you download all of your photos and past searches in one fell swoop". Business Insider. <a href="https://www.businessinsider.com/instagram-data-download-feature-gdpr-privacy-photos-searches-2018-4" target="_blank">https://www.businessinsider.com/instagram-data-download-feature-gdpr-privacy-photos-searches-2018-4</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></li>
<li id="fn:9">"Can I get a copy of my data?". Quora Help Center. 2019-12-13. <a href="https://help.quora.com/hc/en-us/articles/360000839503-Can-I-get-a-copy-of-my-data" target="_blank">https://help.quora.com/hc/en-us/articles/360000839503-Can-I-get-a-copy-of-my-data</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></li>
<li id="fn:10">Hesse, Maik; Teubner, Timm (2020). "Reputation portability — quo vadis?". Electronic Markets. 30 (2): 331–349. doi:10.1007/s12525-019-00367-6. S2CID 255573927. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:10" class="footnote-back-ref">↩</a></li>
<li id="fn:11">Teubner, Timm; Hawlitschek, Florian; Adam, Marc T. P. (2019). "Reputation Transfer". Business & Information Systems Engineering. 61 (2): 229–235. doi:10.1007/s12599-018-00574-z. S2CID 255613268. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:11" class="footnote-back-ref">↩</a></li>
<li id="fn:12">"Exploratory study of consumer issues in online peer-to-peer platform markets". European Commission. Retrieved March 14, 2023. <a href="http://ec.europa.eu/newsroom/just/item-detail.cfm?item_id=77704" target="_blank">http://ec.europa.eu/newsroom/just/item-detail.cfm?item_id=77704</a> <a href="#fnref:12" class="footnote-back-ref">↩</a></li>
<li id="fn:13">Kokkodis, Marios; Ipeirotis, Panagiotis G. (2016). "Reputation transferability in online labor markets". Management Science. 62 (6): 1687–1706. doi:10.1287/mnsc.2015.2217. S2CID 9398036. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:13" class="footnote-back-ref">↩</a></li>
<li id="fn:14">Wessel, Michael; Thies, Ferdinand; Benlian, Alexander (2017). "Competitive Positioning of Complementors on Digital Platforms: Evidence from the Sharing Economy". Proceedings of the International Conference on Information Systems (ICIS). Retrieved March 14, 2023. <a href="https://aisel.aisnet.org/icis2017/Peer-to-Peer/Presentations/21" target="_blank">https://aisel.aisnet.org/icis2017/Peer-to-Peer/Presentations/21</a> <a href="#fnref:14" class="footnote-back-ref">↩</a></li>
<li id="fn:15">Hesse, Maik; Teubner, Timm; Adam, Marc T. P. (2022). "In stars we trust – A note on reputation portability between digital platforms". Business & Information Systems Engineering. 64 (3): 349–358. doi:10.1007/s12599-021-00717-9. hdl:10419/286941. S2CID 244171274. <a href="https://doi.org/10.1007%2Fs12599-021-00717-9" target="_blank">https://doi.org/10.1007%2Fs12599-021-00717-9</a> <a href="#fnref:15" class="footnote-back-ref">↩</a></li>
<li id="fn:16">Teubner, Timm; Adam, Marc T. P.; Hawlitschek, Florian (2020). "Unlocking online reputation: On the effectiveness of cross-platform signaling in the sharing economy". Business & Information Systems Engineering. 62 (6): 501–513. doi:10.1007/s12599-019-00620-4. S2CID 208832472. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:16" class="footnote-back-ref">↩</a></li>
<li id="fn:17">Otto, Lisa; Angerer, Peter; Zimmermann, Steffen (2018). "Incorporating external trust signals on service sharing platforms". Proceedings of the European Conference on Information Systems (ECIS). pp. 1–17. Retrieved March 14, 2023. <a href="https://aisel.aisnet.org/ecis2018_rp/78/" target="_blank">https://aisel.aisnet.org/ecis2018_rp/78/</a> <a href="#fnref:17" class="footnote-back-ref">↩</a></li>
<li id="fn:18">Not limited to web browsers, but also, for example, text editors. <a href="/wiki/Web_browser" target="_blank">/wiki/Web_browser</a> <a href="#fnref:18" class="footnote-back-ref">↩</a></li>
<li id="fn:19">"Bootloader, Recovery, and the joy of unlocking". iFixit (in German). 29 April 2016. <a href="https://de.ifixit.com/Anleitung/Bootloader+Recovery+and+the+joy+of+unlocking/62398" target="_blank">https://de.ifixit.com/Anleitung/Bootloader+Recovery+and+the+joy+of+unlocking/62398</a> <a href="#fnref:19" class="footnote-back-ref">↩</a></li>
<li id="fn:20">"How to Back Up SMS Messages on Your Android Phone". NDTV Gadgets 360. 2017-08-31. <a href="https://gadgets.ndtv.com/apps/features/how-to-backup-sms-android-messages-inbox-sms-backup-and-restore-1744131" target="_blank">https://gadgets.ndtv.com/apps/features/how-to-backup-sms-android-messages-inbox-sms-backup-and-restore-1744131</a> <a href="#fnref:20" class="footnote-back-ref">↩</a></li>
<li id="fn:21">"How do I backup contacts from my old Samsung smartphone to my PC using Kies? | Samsung Support Gulf". Samsung ae. <a href="https://www.samsung.com/ae/support/mobile-devices/how-do-i-backup-contacts-from-my-old-samsung-smartphone-to-my-pc-using-kies/" target="_blank">https://www.samsung.com/ae/support/mobile-devices/how-do-i-backup-contacts-from-my-old-samsung-smartphone-to-my-pc-using-kies/</a> <a href="#fnref:21" class="footnote-back-ref">↩</a></li>
<li id="fn:22">Raphael, J. R. (31 January 2020). "Android backups: A simple guide to keeping your stuff synced". Computerworld. <a href="https://www.computerworld.com/article/3215095/how-to-back-up-android-phones-complete-guide.html" target="_blank">https://www.computerworld.com/article/3215095/how-to-back-up-android-phones-complete-guide.html</a> <a href="#fnref:22" class="footnote-back-ref">↩</a></li>
<li id="fn:23">"PSA: [Cloud storage] Shouldn't Be Your Sole Backup for Your Files". Lifehacker. 2014-07-29. <a href="https://lifehacker.com/psa-dropbox-shouldnt-be-your-sole-backup-for-your-file-1612803794" target="_blank">https://lifehacker.com/psa-dropbox-shouldnt-be-your-sole-backup-for-your-file-1612803794</a> <a href="#fnref:23" class="footnote-back-ref">↩</a></li>
<li id="fn:24">"Android 11, Can't access /storage/emulated/0/android/data · Issue #2015 · TeamAmaze/AmazeFileManager". GitHub. 2020-10-20. <a href="https://github.com/TeamAmaze/AmazeFileManager/issues/2015#issuecomment-712900067" target="_blank">https://github.com/TeamAmaze/AmazeFileManager/issues/2015#issuecomment-712900067</a> <a href="#fnref:24" class="footnote-back-ref">↩</a></li>
<li id="fn:25">Hildenbrand, Jerry (17 August 2020). "What is Scoped Storage in Android 11?". Android Central. <a href="https://www.androidcentral.com/what-scoped-storage" target="_blank">https://www.androidcentral.com/what-scoped-storage</a> <a href="#fnref:25" class="footnote-back-ref">↩</a></li>
<li id="fn:26">"Telekom zieht 2019 beim alten "Entertain" den Stecker". www.onlinekosten.de (in German). 2019-01-17. Archived from the original on 2021-04-12. Retrieved 2020-10-23. <a href="https://web.archive.org/web/20210412055921/https://www.onlinekosten.de/news/telekom-zieht-2019-beim-alten-entertain-den-stecker_214313.html" target="_blank">https://web.archive.org/web/20210412055921/https://www.onlinekosten.de/news/telekom-zieht-2019-beim-alten-entertain-den-stecker_214313.html</a> <a href="#fnref:26" class="footnote-back-ref">↩</a></li>
<li id="fn:27">AG, Deutsche Telekom (2019-01-22). "MagentaTV löst Entertain ab". www.telekom.com (in German). German Telekom. <a href="https://www.telekom.com/de/konzern/details/magentatv-loest-entertain-ab-558808" target="_blank">https://www.telekom.com/de/konzern/details/magentatv-loest-entertain-ab-558808</a> <a href="#fnref:27" class="footnote-back-ref">↩</a></li>
<li id="fn:28">The right to data portability is now enshrined as such in Article 20 "Official Journal of the European Union, 156 page PDF". European Commission. May 4, 2016. <a href="http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L:2016:119:FULL&from=NL" target="_blank">http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L:2016:119:FULL&from=NL</a> <a href="#fnref:28" class="footnote-back-ref">↩</a></li>
<li id="fn:29">"The Final European Union General Data Protection Regulation, by Cedric Burton, Laura De Boel, Christopher Kuner, Anna Pateraki, Sarah Cadiot and Sára G. Hoffman, Section II, 4". Bloomberg BNA. February 12, 2016. Archived from the original on April 19, 2016. Retrieved April 18, 2016. <a href="https://web.archive.org/web/20160419153334/http://www.bna.com/final-european-union-n57982067329#!" target="_blank">https://web.archive.org/web/20160419153334/http://www.bna.com/final-european-union-n57982067329#!</a> <a href="#fnref:29" class="footnote-back-ref">↩</a></li>
<li id="fn:30">"European_Data_Protection_Supervisor (EDPS) (2015): Meeting the challenges of big data: A call for transparency, user control, data protection by design and accountability, Opinion 7/2015, 19 Nov., page 13" (PDF). EDPS. November 19, 2015. <a href="https://secure.edps.europa.eu/EDPSWEB/webdav/site/mySite/shared/Documents/Consultation/Opinions/2015/15-11-19_Big_Data_EN.pdf" target="_blank">https://secure.edps.europa.eu/EDPSWEB/webdav/site/mySite/shared/Documents/Consultation/Opinions/2015/15-11-19_Big_Data_EN.pdf</a> <a href="#fnref:30" class="footnote-back-ref">↩</a></li>
<li id="fn:31">"Commission Nationale de l'Informatique et des Libertés (CNIL) (2016): Sujet de discussion > Le droit à la portabilité: quelles opportunités ?". CNIL. June 15, 2016. <a href="https://www.cnil.fr/fr/consultation-reglement-europeen/portabilite/le-droit-la-portabilite-quelles-opportunites" target="_blank">https://www.cnil.fr/fr/consultation-reglement-europeen/portabilite/le-droit-la-portabilite-quelles-opportunites</a> <a href="#fnref:31" class="footnote-back-ref">↩</a></li>
<li id="fn:32">"EU Article 29 Working Party". European Union. Retrieved 30 May 2018. Official website. <a href="http://ec.europa.eu/newsroom/article29/news.cfm?item_type=1358" target="_blank">http://ec.europa.eu/newsroom/article29/news.cfm?item_type=1358</a> <a href="#fnref:32" class="footnote-back-ref">↩</a></li>
<li id="fn:33">"EU Data Act – making data portability actionable, blog post". MyData network. February 25, 2022. <a href="https://www.mydata.org/2022/02/25/eu-data-act-making-data-portability-actionable/" target="_blank">https://www.mydata.org/2022/02/25/eu-data-act-making-data-portability-actionable/</a> <a href="#fnref:33" class="footnote-back-ref">↩</a></li>
<li id="fn:34">Exposito-Rosso, Stéphanie; Cao, François-Xavier; Piquet, Antoine; Medjaoui, Mehdi (2021). "GDPR Data Portability: The Forgotten Right, a research report" (PDF). ALIAS, société Code is Law. <a href="https://cellar-c2.services.clever-cloud.com/alias-code-is-law-assets/static/report/gdpr_data_portability_the_forgotten_right_report_full.pdf" target="_blank">https://cellar-c2.services.clever-cloud.com/alias-code-is-law-assets/static/report/gdpr_data_portability_the_forgotten_right_report_full.pdf</a> <a href="#fnref:34" class="footnote-back-ref">↩</a></li>
<li id="fn:35">"EU Data Act – making data portability actionable, blog post". MyData network. February 25, 2022. <a href="https://www.mydata.org/2022/02/25/eu-data-act-making-data-portability-actionable/" target="_blank">https://www.mydata.org/2022/02/25/eu-data-act-making-data-portability-actionable/</a> <a href="#fnref:35" class="footnote-back-ref">↩</a></li>
<li id="fn:36">Lynskey, Orla (August 8, 2017). "The Great Data Protection Rebranding Exercise, blog post". London School of Economics. <a href="http://blogs.lse.ac.uk/mediapolicyproject/2017/08/08/the-great-data-protection-rebranding-exercise/" target="_blank">http://blogs.lse.ac.uk/mediapolicyproject/2017/08/08/the-great-data-protection-rebranding-exercise/</a> <a href="#fnref:36" class="footnote-back-ref">↩</a></li>
<li id="fn:37">Perarnaud, Clement. "GDPR - After More than One Year: How to Make it Happen? Report, Internet Governance Forum, Berlin, 25 Nov 2019, Pre-event 45 (15:45 to 18:15)". Diplo Foundation. Archived from the original on 29 July 2020. Retrieved 27 November 2019. <a href="https://web.archive.org/web/20200729035207/https://dig.watch/sessions/gdpr-after-more-one-year-how-make-it-happen" target="_blank">https://web.archive.org/web/20200729035207/https://dig.watch/sessions/gdpr-after-more-one-year-how-make-it-happen</a> <a href="#fnref:37" class="footnote-back-ref">↩</a></li>
<li id="fn:38">"Port My Data, About The Project". University College London. Retrieved 27 November 2019. <a href="https://portmydata.github.io/about/" target="_blank">https://portmydata.github.io/about/</a> <a href="#fnref:38" class="footnote-back-ref">↩</a></li>
<li id="fn:39">Wong, Janis; Henderson, Tristan (August 2019). "Exploring the implications of the technologically neutral GDPR". International Data Privacy Law. 9 (3): 173–191. doi:10.1093/idpl/ipz008. hdl:10023/23477. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:39" class="footnote-back-ref">↩</a></li>
<li id="fn:40">Li, Wenlong. "Between incrementalism and revolution: How the GDPR right to data portability is revamped by the EU and the UK post Brexit will appear in the Research Handbook of EU Data Protection Law". Retrieved August 2, 2021. <a href="https://osf.io/8u2pr/" target="_blank">https://osf.io/8u2pr/</a> <a href="#fnref:40" class="footnote-back-ref">↩</a></li>
<li id="fn:41">"A New Competition Framework for the Digital Economy Report by the Commission 'Competition Law 4.0', Summary" (PDF). Federal Ministry for Economic Affairs and Energy. September 8, 2019. <a href="https://www.bmwi.de/Redaktion/EN/Downloads/a/a-new-competition-framework.pdf?__blob=publicationFile&v=2" target="_blank">https://www.bmwi.de/Redaktion/EN/Downloads/a/a-new-competition-framework.pdf?__blob=publicationFile&v=2</a> <a href="#fnref:41" class="footnote-back-ref">↩</a></li>
<li id="fn:42">"The GDPR and its consequences for Switzerland" (PDF). March 2018. Retrieved October 7, 2018. <a href="https://www.edoeb.admin.ch/dam/edoeb/en/dokumente/2018/EU%20DSGVO.pdf.download.pdf" target="_blank">https://www.edoeb.admin.ch/dam/edoeb/en/dokumente/2018/EU%20DSGVO.pdf.download.pdf</a> <a href="#fnref:42" class="footnote-back-ref">↩</a></li>
<li id="fn:43">"Postulat "Recht auf Kopie" vom Bundesrat angenommen". Verein Datenundgesundheit. Retrieved October 8, 2019. <a href="https://www.datenundgesundheit.ch/2015/11/12/posultat-recht-auf-kopie-vom-bundesrat-angenommen/?lang=en" target="_blank">https://www.datenundgesundheit.ch/2015/11/12/posultat-recht-auf-kopie-vom-bundesrat-angenommen/?lang=en</a> <a href="#fnref:43" class="footnote-back-ref">↩</a></li>
<li id="fn:44">"Kommission schliesst Beratung der Revision des Datenschutzgesetzes ab, press release". Federal Assembly. Retrieved August 19, 2019. <a href="https://www.parlament.ch/press-releases/Pages/mm-spk-n-2019-08-16-a.aspx?lang=1031" target="_blank">https://www.parlament.ch/press-releases/Pages/mm-spk-n-2019-08-16-a.aspx?lang=1031</a> <a href="#fnref:44" class="footnote-back-ref">↩</a></li>
<li id="fn:45">"Réforme de la protection des données: fin de l'examen du projet, Press release, 16 August 2019". Federal Assembly. Retrieved December 4, 2019. <a href="https://www.parlament.ch/press-releases/Pages/mm-spk-n-2019-08-16-a.aspx?lang=1033" target="_blank">https://www.parlament.ch/press-releases/Pages/mm-spk-n-2019-08-16-a.aspx?lang=1033</a> <a href="#fnref:45" class="footnote-back-ref">↩</a></li>
<li id="fn:46">"Home". midata.coop. <a href="http://www.midata.coop/" target="_blank">http://www.midata.coop/</a> <a href="#fnref:46" class="footnote-back-ref">↩</a></li>
<li id="fn:47">Swiss Data Alliance (August 2020). "Guideline for the implementation of data portability in Switzerland". Retrieved August 28, 2020. <a href="https://drive.google.com/file/d/1EbTbIOnF95z-1GH-Rv9AfY8XU4mJCF3i/view" target="_blank">https://drive.google.com/file/d/1EbTbIOnF95z-1GH-Rv9AfY8XU4mJCF3i/view</a> <a href="#fnref:47" class="footnote-back-ref">↩</a></li>
<li id="fn:48">"Transborder data flows". Retrieved October 7, 2018. <a href="https://www.edoeb.admin.ch/edoeb/en/home/data-protection/arbeitsbereich/transborder-data-flows.html" target="_blank">https://www.edoeb.admin.ch/edoeb/en/home/data-protection/arbeitsbereich/transborder-data-flows.html</a> <a href="#fnref:48" class="footnote-back-ref">↩</a></li>
<li id="fn:49">Wong, Janis; Henderson, Tristan (August 2019). "The right to data portability in practice: exploring the implications of the technologically neutral GDPR" (PDF). International Data Privacy Law. 9 (3): 173–191. doi:10.1093/idpl/ipz008. Retrieved September 3, 2019. <a href="https://tnhh.org/research/pubs/rtdp_idpl2019.pdf" target="_blank">https://tnhh.org/research/pubs/rtdp_idpl2019.pdf</a> <a href="#fnref:49" class="footnote-back-ref">↩</a></li>
<li id="fn:50">"Canada's Digital Charter: Trust in a digital world". Retrieved January 2, 2020. <a href="https://www.ic.gc.ca/eic/site/062.nsf/eng/h_00108.html" target="_blank">https://www.ic.gc.ca/eic/site/062.nsf/eng/h_00108.html</a> <a href="#fnref:50" class="footnote-back-ref">↩</a></li>
<li id="fn:51">"Brazilian General Data Protection Law (LGPD, English translation)". Retrieved 2020-12-06. <a href="https://iapp.org/resources/article/brazilian-data-protection-law-lgpd-english-translation/" target="_blank">https://iapp.org/resources/article/brazilian-data-protection-law-lgpd-english-translation/</a> <a href="#fnref:51" class="footnote-back-ref">↩</a></li>
<li id="fn:52">Wong, Janis; Henderson, Tristan (August 2019). "The right to data portability in practice: exploring the implications of the technologically neutral GDPR" (PDF). International Data Privacy Law. 9 (3): 173–191. doi:10.1093/idpl/ipz008. Retrieved September 3, 2019. <a href="https://tnhh.org/research/pubs/rtdp_idpl2019.pdf" target="_blank">https://tnhh.org/research/pubs/rtdp_idpl2019.pdf</a> <a href="#fnref:52" class="footnote-back-ref">↩</a></li>
<li id="fn:53">Lagrange, Marion; Hongchayangkool, Yada. "Personal Data Protection in Thailand, June 2019" (PDF). DFDL Thailand, Bangkok. Retrieved December 27, 2019. <a href="https://www.etda.or.th/app/webroot/content_files/13/files/1.PDPA%20Presentation_CyberSecurity%20Week%202019.pdf" target="_blank">https://www.etda.or.th/app/webroot/content_files/13/files/1.PDPA%20Presentation_CyberSecurity%20Week%202019.pdf</a> <a href="#fnref:53" class="footnote-back-ref">↩</a></li>
<li id="fn:54">"Data Protection Act, 2018 (in bill status)" (PDF). Government of Kenya. Retrieved December 27, 2019. <a href="http://www.ict.go.ke/wp-content/uploads/2016/04/Kenya-Data-Protection-Bill-2018-14-08-2018.pdf" target="_blank">http://www.ict.go.ke/wp-content/uploads/2016/04/Kenya-Data-Protection-Bill-2018-14-08-2018.pdf</a> <a href="#fnref:54" class="footnote-back-ref">↩</a></li>
<li id="fn:55">Wangari, Njeri (24 December 2019). "Kenya now has a data protection law. What does this mean for netizens? 24 December 2019". Retrieved December 27, 2019. <a href="https://advox.globalvoices.org/2019/12/24/kenya-now-has-a-data-protection-law-what-does-this-mean-for-netizens/" target="_blank">https://advox.globalvoices.org/2019/12/24/kenya-now-has-a-data-protection-law-what-does-this-mean-for-netizens/</a> <a href="#fnref:55" class="footnote-back-ref">↩</a></li>
<li id="fn:56">Krämer, Jan; Senellart, Pierre; de Streel, Alexandre. "Making data portability more effective for the digital economy". Centre on Regulation in Europe. Retrieved June 13, 2020. <a href="https://www.cerre.eu/publications/report-making-data-portability-more-effective-digital-economy" target="_blank">https://www.cerre.eu/publications/report-making-data-portability-more-effective-digital-economy</a> <a href="#fnref:56" class="footnote-back-ref">↩</a></li>
<li id="fn:57">Gabel, Detlev; Hickman, Tim (2016). "Unlocking the EU General Data Protection Regulation: A practical handbook on the EU's new data protection law". White & Case LLP. <a href="http://www.whitecase.com/publications/article/chapter-9-rights-data-subjects-unlocking-eu-general-data-protection-regulation" target="_blank">http://www.whitecase.com/publications/article/chapter-9-rights-data-subjects-unlocking-eu-general-data-protection-regulation</a> <a href="#fnref:57" class="footnote-back-ref">↩</a></li>
<li id="fn:58">Edwards, Lilian; Veale, Michael (2017). "Slave to the Algorithm? Why a 'Right to an Explanation' is Probably not the Remedy you are Looking for". SSRN 2972855. <a href="/wiki/SSRN_(identifier)" target="_blank">/wiki/SSRN_(identifier)</a> <a href="#fnref:58" class="footnote-back-ref">↩</a></li>
<li id="fn:59">Gabel, Detlev; Hickman, Tim (July 22, 2016). "Chapter 9: Rights of data subjects – Unlocking the EU General Data Protection Regulation". White & Case. <a href="http://www.whitecase.com/publications/article/chapter-9-rights-data-subjects-unlocking-eu-general-data-protection-regulation" target="_blank">http://www.whitecase.com/publications/article/chapter-9-rights-data-subjects-unlocking-eu-general-data-protection-regulation</a> <a href="#fnref:59" class="footnote-back-ref">↩</a></li>
<li id="fn:60">Metz, Cade (July 11, 2016). "Artificial Intelligence Is Setting Up the Internet for a Huge Clash With Europe". Wired. <a href="https://www.wired.com/2016/07/artificial-intelligence-setting-internet-huge-clash-europe/" target="_blank">https://www.wired.com/2016/07/artificial-intelligence-setting-internet-huge-clash-europe/</a> <a href="#fnref:60" class="footnote-back-ref">↩</a></li>
<li id="fn:61">Lee Bygrave, "Minding the Machine: Article 15 of the EC Data Protection Directive and Automated Profiling", Computer Law & Security Report, 2001, vol. 17, pp. 17–24, available at folk.uio.no <a href="http://folk.uio.no/lee/oldpage/articles/Minding_machine.pdf" target="_blank">http://folk.uio.no/lee/oldpage/articles/Minding_machine.pdf</a> <a href="#fnref:61" class="footnote-back-ref">↩</a></li>
<li id="fn:62">Mireille Hildebrandt (2012) "The Dawn of a Critical Transparency Right for the Profiling Era" Amsterdam Digital Enlightenment Yearbook 2012, p. 41-56, available at works.bepress.com <a href="/wiki/Mireille_Hildebrandt" target="_blank">/wiki/Mireille_Hildebrandt</a> <a href="#fnref:62" class="footnote-back-ref">↩</a></li>
<li id="fn:63">Pasquale, Frank (2015). The Black Box Society. Harvard University Press. <a href="#fnref:63" class="footnote-back-ref">↩</a></li>
<li id="fn:64">Rotenberg, Marc (December 19, 2014). "[8] EPIC Book Review: 'The Black Box Society'". EPIC Alert. Vol. 21, no. 24. <a href="https://epic.org/alert/epic_alert_21.24.html" target="_blank">https://epic.org/alert/epic_alert_21.24.html</a> <a href="#fnref:64" class="footnote-back-ref">↩</a></li>
<li id="fn:65">"Explainable Artificial Intelligence". <a href="https://www.darpa.mil/program/explainable-artificial-intelligence" target="_blank">https://www.darpa.mil/program/explainable-artificial-intelligence</a> <a href="#fnref:65" class="footnote-back-ref">↩</a></li>
<li id="fn:66">Kiulian, Artur (2016). "Saving Humanity From Dangerous Artificial Intelligence Scenario". Medium.com. <a href="https://medium.com/swlh/saving-humanity-from-dangerous-artificial-intelligence-scenario-223273cf8810?source=catalog_tab---------1---------" target="_blank">https://medium.com/swlh/saving-humanity-from-dangerous-artificial-intelligence-scenario-223273cf8810?source=catalog_tab---------1---------</a> <a href="#fnref:66" class="footnote-back-ref">↩</a></li>
<li id="fn:67">Goodman, Bryce; Flaxman, Seth (August 31, 2016). "European Union regulations on algorithmic decision-making and a "right to explanation"". AI Magazine. 38 (3): 50. arXiv:1606.08813. Bibcode:2016arXiv160608813G. doi:10.1609/aimag.v38i3.2741. S2CID 7373959. <a href="/wiki/ArXiv_(identifier)" target="_blank">/wiki/ArXiv_(identifier)</a> <a href="#fnref:67" class="footnote-back-ref">↩</a></li>
<li id="fn:68">Pasquale, Frank (February 5, 2016). "Bittersweet Mysteries of Machine Learning (A Provocation) (blog entry)". Archived from the original on December 1, 2016. Retrieved November 30, 2016. <a href="https://web.archive.org/web/20161201014921/http://blogs.lse.ac.uk/mediapolicyproject/2016/02/05/bittersweet-mysteries-of-machine-learning-a-provocation/" target="_blank">https://web.archive.org/web/20161201014921/http://blogs.lse.ac.uk/mediapolicyproject/2016/02/05/bittersweet-mysteries-of-machine-learning-a-provocation/</a> <a href="#fnref:68" class="footnote-back-ref">↩</a></li>
<li id="fn:69">"Series on Algorithmic Accountability". February 5, 2016. Archived from the original on December 20, 2016. Retrieved December 7, 2016. <a href="https://web.archive.org/web/20161220084911/http://blogs.lse.ac.uk/mediapolicyproject/category/algorithmic-accountability/page/2/" target="_blank">https://web.archive.org/web/20161220084911/http://blogs.lse.ac.uk/mediapolicyproject/category/algorithmic-accountability/page/2/</a> <a href="#fnref:69" class="footnote-back-ref">↩</a></li>
<li id="fn:70">Kamarinou, Dimitra; Millard, Christopher; Singh, Jatinder (November 7, 2016). "Machine Learning with Personal Data". SSRN 2865811. <a href="/wiki/SSRN_(identifier)" target="_blank">/wiki/SSRN_(identifier)</a> <a href="#fnref:70" class="footnote-back-ref">↩</a></li>
<li id="fn:71">Mittelstadt, Brent D.; Allo, Patrick; Taddeo, Mariarosaria; Wachter, Sandra; Floridi, Luciano (November 1, 2016). "The ethics of algorithms: Mapping the debate. In: Big Data & Society, Vol. 3, No. 2". Big Data & Society. 3 (2): 205395171667967. doi:10.1177/2053951716679679. S2CID 40342036. <a href="https://doi.org/10.1177%2F2053951716679679" target="_blank">https://doi.org/10.1177%2F2053951716679679</a> <a href="#fnref:71" class="footnote-back-ref">↩</a></li>
<li id="fn:72">Wachter, Sandra; Mittelstadt, Brent; Floridi, Luciano (December 28, 2016). "Why a Right to Explanation of Automated Decision-Making Does Not Exist in the General Data Protection Regulation". SSRN 2903469. <a href="/wiki/SSRN_(identifier)" target="_blank">/wiki/SSRN_(identifier)</a> <a href="#fnref:72" class="footnote-back-ref">↩</a></li>
<li id="fn:73">Edwards, Lilian; Veale, Michael (2017-05-23). "Slave to the Algorithm? Why a 'Right to an Explanation' is Probably Not the Remedy You are Looking For". SSRN 2972855. <a href="/wiki/SSRN_(identifier)" target="_blank">/wiki/SSRN_(identifier)</a> <a href="#fnref:73" class="footnote-back-ref">↩</a></li>
<li id="fn:74">Selbst, Andrew D; Powles, Julia (2017-01-11). "Meaningful information and the right to explanation". International Data Privacy Law. 7 (4): 233–242. doi:10.1093/idpl/ipx022. <a href="https://doi.org/10.1093%2Fidpl%2Fipx022" target="_blank">https://doi.org/10.1093%2Fidpl%2Fipx022</a> <a href="#fnref:74" class="footnote-back-ref">↩</a></li>
<li id="fn:75">Hancock, Matt (2015). "Artificial intelligence: opportunities and implications for the future of decision making" (PDF). [UK] Government Office for Science. <a href="https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/566075/gs-16-19-artificial-intelligence-ai-report.pdf" target="_blank">https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/566075/gs-16-19-artificial-intelligence-ai-report.pdf</a> <a href="#fnref:75" class="footnote-back-ref">↩</a></li>
<li id="fn:76">Hancock, Matt (May 19, 2016). "Data Science Ethical Framework". Cabinet Office, Government Digital Service. <a href="https://www.gov.uk/government/publications/data-science-ethical-framework" target="_blank">https://www.gov.uk/government/publications/data-science-ethical-framework</a> <a href="#fnref:76" class="footnote-back-ref">↩</a></li>
<li id="fn:77">Boyd, danah (November 7, 2016). "Transparency ≠ Accountability: Remarks prepared for a public roundtable on algorithmic accountability and transparency in the digital economy". datasociety.net. <a href="http://points.datasociety.net/transparency-accountability-3c04e4804504" target="_blank">http://points.datasociety.net/transparency-accountability-3c04e4804504</a> <a href="#fnref:77" class="footnote-back-ref">↩</a></li>
<li id="fn:78">"Principles for Accountable Algorithms and a Social Impact Statement for Algorithms". NYU. November 18, 2016. <a href="http://www.fatml.org/resources/principles-for-accountable-algorithms" target="_blank">http://www.fatml.org/resources/principles-for-accountable-algorithms</a> <a href="#fnref:78" class="footnote-back-ref">↩</a></li>
<li id="fn:79">"Ethically Aligned Design: A Vision for Prioritizing Human Wellbeing with Artificial Intelligence and Autonomous Systems". IEEE. December 13, 2016. Archived from the original on December 17, 2016. <a href="https://web.archive.org/web/20161217025544/http://standards.ieee.org/news/2016/ethically_aligned_design.html" target="_blank">https://web.archive.org/web/20161217025544/http://standards.ieee.org/news/2016/ethically_aligned_design.html</a> <a href="#fnref:79" class="footnote-back-ref">↩</a></li>
<li id="fn:80">De Hert, Paul; Papakonstantinou, Vagelis; Malgieri, Gianclaudio; Beslay, Laurent; Sanchez, Ignacio (20 November 2017). "The right to data portability in the GDPR: Towards user-centric interoperability of digital services. Open Access funded by Joint Research Centre". Computer Law & Security Review. 34 (2): 193. doi:10.1016/j.clsr.2017.10.003. <a href="https://doi.org/10.1016%2Fj.clsr.2017.10.003" target="_blank">https://doi.org/10.1016%2Fj.clsr.2017.10.003</a> <a href="#fnref:80" class="footnote-back-ref">↩</a></li>
</ol>

Data portability open-in-new

Data portability