Taking Your Data with You – Portability, the DMA and Open Formats
Taking Your Data with You – Portability, the DMA and Open Formats
Imagine moving house and simply being able to take your furniture with you. That's how it should be with your data too: when you switch providers, your files, calendar and contacts just come along. That's exactly what data portability is about. The EU is strengthening this principle with several rules – and with open formats, you can do a lot yourself.
What is data portability?
Data portability means you get your data in a common, machine-readable format and can take it to another service. For personal data, the GDPR has given everyone this right since 2018.
Which EU rules help?
| Rule | What it's about |
|---|---|
| GDPR | Right to data portability for personal data |
| Data Act | Makes switching between cloud providers easier; switching charges are being phased out |
| Digital Markets Act (DMA) | Obligations for very large platforms, including on interoperability and portability |
With the DMA, the European Commission is also looking into whether and how large cloud services fall within its scope. How that turns out remains to be seen. But the direction is clear: data should become easier to move.
A few terms, briefly explained
- Gatekeeper: The DMA's term for very large platforms with major market significance.
- Interoperability: Different programs and services can work together.
- Open formats: File formats whose structure is publicly documented, so many programs can read them.
What you can do yourself
Rules help, but you get the most freedom with open formats and standards. A few examples:
| Area | Open standard | Typical open-source solution |
|---|---|---|
| Files | WebDAV | Nextcloud |
| Calendar | CalDAV | Nextcloud, Thunderbird |
| Contacts | CardDAV | Nextcloud, Thunderbird |
| IMAP | any good mail server | |
| Documents | ODF, but also DOCX/XLSX | LibreOffice, Collabora, ONLYOFFICE |
| Chat | Matrix | Element |
| Passwords | Export as CSV or JSON | Vaultwarden |
With these standards, you can swap not only providers but also individual programs – without a big moving mess.
A small portability check
- Find export functions: Where can you download your data for each service?
- Try it once: Do a complete export and take a look.
- Choose open formats: Use open standards wherever possible.
- Repeat regularly: Once a year, ideally together with your backup check.
You'll find an overview of open alternatives under Alternatives.
An everyday example
A small online retailer has been using various cloud services for years. He runs the portability check and finds:
| Service | Export possible? | Format | Rating |
|---|---|---|---|
| File storage | yes | normal files | very good |
| Calendar | yes | ICS | good |
| Contacts | yes | vCard | good |
| yes | via IMAP | good | |
| Notes app | one by one only | proprietary format | cumbersome |
Almost everything can be taken along easily. Only the notes app makes it hard. So the retailer moves his notes to Nextcloud Notes, where they're stored as simple text files. That makes this area easily portable in future too.
Frequently asked questions
Can I demand an export from any provider? For personal data, the GDPR gives you a right to data portability. Beyond that, most services offer export functions. If needed, clarify what exactly applies in your case with a legal adviser.
What do I do with exported data? Keep it encrypted, for example together with your backups. That way you always have an independent copy.
Are open formats worse than proprietary ones? No. Open formats like ODF, ICS or vCard are mature and supported by a great many programs.
Conclusion
Step by step, the EU is making it easier to take your data with you. But you have the most freedom if you rely on open formats and open-source software from the start. Then moving isn't a project – it's almost routine. If you'd like support, have a look at Consulting.
If you'd like to give it a try, I'm happy to help – just drop me a line.
The KBV IT Security Guideline – Simply Explained for Your Practice
What the IT security guideline under § 390 SGB V means for medical, dental and psychotherapy practices in Germany and how to implement it step by step.
The CLOUD Act, Simply Explained – and What It Means for Your Data
What is the CLOUD Act, and why are many businesses interested in cloud solutions in Europe? A calm explanation without jargon.