Right to data portability

15.(1) The data subject has the right to receive the personal data concerning him, which he has provided to a data controller, in a structured, commonly used and machine-readable format.

(2) The data subject has the right to transmit the personal data concerning him, which he has provided to a data controller to another data controller without hindrance where

(a) the processing is based on consent pursuant to section 6(1)(a) or section 9(1)(a) or on a contract pursuant to section 6(1)(b)(i); and

(b) the processing is carried out by automated means.

(3) In exercising his right to data portability pursuant to subsections (1) and (2), the data subject shall have the right to have his personal data transmitted directly from one data controller to another, where technically feasible.

(4) The exercise of the right referred to in subsection (1) shall be exercised without prejudice to section 12.

(5) The exercise of the right referred to in subsection (1) shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

(6) The exercise of the right referred to in subsection (1) shall not adversely affect the rights and freedoms of other data subjects.