Re:Data portability, the forgotten right of GDPR
by TeMPOraL on Tuesday May 25, 2021 @10:23AM
(#27277125)
> If you're a good person and a business owner, you're looking to make mutually beneficial business transactions.
Exactly this. The transactions become much less mutually beneficial if the business is trying to hold my data hostage. Especially if they gave no indication of it previously, back when I was still evaluating the value of the transaction.
We had a good time, I got value from their services, they got my money and perhaps some extra benefits too - now it's time for us to part ways, I'm packing and I want my stuff back.
> If someone is looking to move away from using your business, then it's them who's trying to extract value from you, without giving anything in return.
Transactions on the market are supposed to be voluntary. This means I should be free to move away from using any business, after discharging all my obligations to it that I voluntarily accepted. By switching to a competitor, I'm not taking any more value from the company. As for asking for my data back, a business should consider my data loaned to them. It's their obligation - social, and now legal - to give it back.
GDPR specifies more than one way to do this. Controller to Subject transfers are a no-brainer. It's my data, I want it back. Controller to Controller transfers are gated by "where technically feasible". This point is there to ensure that businesses which don't have the necessary infrastructure in place aren't forced to spend time and effort to build it up. Only those that can do it at negligible costs are being forced to provide this option.
Exactly this. The transactions become much less mutually beneficial if the business is trying to hold my data hostage. Especially if they gave no indication of it previously, back when I was still evaluating the value of the transaction.
We had a good time, I got value from their services, they got my money and perhaps some extra benefits too - now it's time for us to part ways, I'm packing and I want my stuff back.
> If someone is looking to move away from using your business, then it's them who's trying to extract value from you, without giving anything in return.
Transactions on the market are supposed to be voluntary. This means I should be free to move away from using any business, after discharging all my obligations to it that I voluntarily accepted. By switching to a competitor, I'm not taking any more value from the company. As for asking for my data back, a business should consider my data loaned to them. It's their obligation - social, and now legal - to give it back.
GDPR specifies more than one way to do this. Controller to Subject transfers are a no-brainer. It's my data, I want it back. Controller to Controller transfers are gated by "where technically feasible". This point is there to ensure that businesses which don't have the necessary infrastructure in place aren't forced to spend time and effort to build it up. Only those that can do it at negligible costs are being forced to provide this option.