# Right to data portability — GDPR — context bundle > Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/gdpr/art-20 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Right to data portability — Right to data portability *GDPR, gdpr-art-20-en — https://overview.legal/laws/gdpr/art-20* 1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and b) the processing is carried out by automated means. 2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. 3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others. ## Enforcement 9 decision(s) on record cite Article 20, totalling approximately €1,235,200 in fines (median €59,600). Top fines: - **Fastweb S.p.A.: Non-compliance with general data processing principles** (ITALY, €1,000,000) — https://overview.legal/posts/48655 - **Energia Verde S.p.A.: Non-compliance with general data processing principles** (ITALY, €100,000) — https://overview.legal/posts/48866 - **Energia Verde S.p.A.: Niet-naleving van de algemene principes voor gegevensverwerking.** (ITALY, €100,000) — https://overview.legal/posts/52295 - **CZECH REPUBLIC DPA: Non-compliance with general data processing principles** (CZECH REPUBLIC, €19,200) — https://overview.legal/posts/46770 - **Migliarino San Rossore Massaciuccoli Regional Park Authority: Insufficient legal basis for data processing** (ITALY, €8,000) — https://overview.legal/posts/49016 ## Guidance ### Guidelines on processing of personal data through blockchain technologies *EDPB — https://overview.legal/posts/125668* Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information version 1.1 08 April 2025 adoption of the guidelines before public consultation version 2.0 07 July 2026 adoption of the guidelines after public consultation 3 | Adopted 4 | Adopted The European Data Protection Board Having regard to Article 70 (1)(e) of the Regulation 2016/679/EU of the European Parliament and of the… ### Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) *EDPB — https://overview.legal/posts/38076* The Article 29 Data Protection Working Party issued these guidelines (WP260 rev.01), adopted on 29 November 2017 and last revised on 11 April 2018, to provide interpretive and practical guidance on the transparency requirements under the GDPR (Articles 12–14). The document addresses the form, timing, content, and modalities of information provided to data subjects, including issues such as plain language, layered privacy notices, information for children, and exceptions to the obligation to provide information. No fines or enforcement actions are imposed, as this is a guidance document rather than an enforcement decision. ### VERSIEGESCHIEDENIS *EDPB — https://overview.legal/posts/38079* De EDPB heeft op 20 juni 2023 de aanbevelingen 1/2022 inzake bindende bedrijfsvoorschriften voor verwerkingsverantwoordelijken (artikel 47 AVG) vastgesteld, ter vervanging van de eerdere WP 256 rev.01 en WP 264. Het document voorziet in een standaardaanvraagformulier voor goedkeuring van bindende bedrijfsvoorschriften en geeft uitleg bij de vereiste inhoudelijke elementen en beginselen, waaronder de afbakening tussen wat in de bindende bedrijfsvoorschriften zelf en wat in de aanvraag bij de leidende toezichthoudende autoriteit moet worden opgenomen. De aanbevelingen zijn bedoeld om ondernemingen die persoonsgegevens doorgeven aan groepsentiteiten in derde landen zonder passend beschermingsniveau (artikel 45 AVG) te ondersteunen bij het voldoen aan de passende waarborgen van artikel 46 AVG. ### Versiegeschiedenis *EDPB — https://overview.legal/posts/38081* De Europese Raad voor gegevensbescherming (EDPB) heeft deze richtsnoeren uitgebracht betreffende de accreditatie van certificeringsorganisaties onder artikel 43 van de AVG. Het document biedt interpretatieve guidance over de rol van lidstaten, nationale accreditatie-instanties en toezichthoudende autoriteiten bij het accreditatieproces, alsmede over de wisselwerking met Verordening (EG) nr. 765/2008 en de daaruit voortvloeiende accreditatie-eisen. De richtsnoeren zijn in versie 3.0 vastgesteld op 4 juni 2019, waarbij Bijlage 1 werd toegevoegd na openbare raadpleging. ### Translations proofread by EDPB Members. This language version has not yet been proofread. *EDPB — https://overview.legal/posts/38114* The European Data Protection Board (EDPB) published a Dutch language translation table for key GDPR terminology used in its guidance documents, including terms such as "controller" (verwerkingsverantwoordelijke), "processor" (verwerker), and "data transfer" (gegevensdoorgifte). The document is explicitly marked as a translation that has not yet been proofread by EDPB Members, indicating it is a draft or provisional language version. This translation resource serves to support consistent Dutch-language usage of GDPR concepts across EDPB guidance materials. ## Related topics - **Data Portability** — https://overview.legal/topics/data-portability ## Legal Framework - **Data Portability** — https://overview.legal/topics/dataportabiliteit ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/gdpr/art-20 · 2026-08-22