Social Media: Data Protection
Question
Dame Chi Onwurah
To ask the Secretary of State for Science, Innovation and Technology, what assessment he has made of the potential merits of taking legislative steps to require social media platforms to enable users to transfer their (a) data, (b) content and (c) connections between competing services, in the context of the Digital Choice Act in Utah, US.
Answer
Chris BryantArticle 20 of the UK General Data Protection Regulation (UK GDPR) already provides individuals with a right to ‘data portability’. It applies where an individual has provided their personal data to one data controller based on consent or a contract and wants that organisation to transmit it directly to another data controller. The right only applies to personal data that is being processed by automated means and where the transmission would be technically feasible.
The Information Commissioner’s Office, the UK’s independent regulator for data protection, has published guidance for organisations on the right to data portability, which can be viewed at Right to data portability | ICO.