The data subject has the right to receive the personal data they provided to the owner of a data bank, in a structured, commonly used and machine-readable format, and to transmit them to another owner or have them transmitted directly where technically possible, where the processing is based on consent or a contract with the data subject or is carried out by automated means, unless direct transmission would impose an excessive financial or technical burden (which the owner must be able to prove to the Authority); derived, inferred or constructed data (data that went through personalisation, categorisation or profiling) are portable only if the owner so determines; the right does not prejudice third parties' rights and does not apply to processing necessary for public entities' functions; it took effect six months after the Regulation entered into force.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.