About this tool
Draft a GDPR Article 20 request for a machine-readable export of your personal data, with an eligibility check and the reply deadline.
The Data Portability Request Generator drafts a GDPR Article 20 request for a machine-readable copy of your personal data, and first checks whether Article 20 actually applies — it attaches only to automated processing based on consent or a contract, and only to data you provided or that was observed from your use of the service. Where it does not apply, the letter is rewritten as an Article 15 access request so you still get the data. It also calculates the reply deadline: one calendar month under Art. 12(3), or 45 days under Cal. Civ. Code s.1798.130(a)(2).
Open Data Portability Request Generator on AltFTool — it loads instantly in your browser.
Provide your input — an image, text, or data.
Let the tool analyze or generate the result.
Review, refine, and reuse the output wherever you need it.
Selecting legitimate interests or legal obligation switches the letter to an access request instead of citing a right that does not apply.
Separates data you provided and data observed from inferred data such as scores and interest profiles, which sits outside Article 20.
Flags PDF as non-machine-readable, the most common way an export technically complies while being unusable.
GDPR Article 20 gives you the right to receive personal data you provided to a controller in a structured, commonly used and machine-readable format, and to transmit it to another controller. It applies only where the processing is automated and based on consent or on a contract, and Article 20(2) adds a right to have the data sent directly from one controller to another where technically feasible.
No. Article 29 Working Party Guidelines WP242 rev.01 limit it to data you actively provided, such as form entries and uploads, and data observed from your activity, such as search history, location and raw device logs. Data the controller derived or inferred — credit scores, risk ratings, advertising interest profiles — falls outside Article 20, though you can still request it under the Article 15 right of access.
It should not. Article 20(1) requires a structured, commonly used and machine-readable format, and a PDF of formatted tables or a set of scanned images does not let you re-use or transmit the data. JSON, CSV and XML all satisfy the requirement. If you receive a PDF, ask again citing Article 20(1) and specify the format you want.
No. The Digital Personal Data Protection Act, 2023 gives a Data Principal the right to a summary of their personal data and the processing activities under section 11, and rights to correction and erasure under section 12, but it contains no standalone portability right. You can still ask for a machine-readable export as a matter of practice. This is informational content, not legal advice.