4 ms·
For a possible motivation, the GDPR confers a right to data portability, and whilst there is guidance[1] that this "does not create an obligation for you to ado
by jsty 8y ago
For a possible motivation, the GDPR confers a right to data portability, and whilst there is guidance[1] that this "does not create an obligation for you to adopt or maintain processing systems which are technically compatible with those of other organisations", this is probably one of the easiest ways of demonstrating compliance.
For the biggest and most widely used services, it definitely would respect the spirit of the regulation more closely than e.g. just giving a json dump, since that's fairly useless to your average user.
[1] https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/ https://ico.org.uk/for-organisations/guide-to-the-general-da...
- jpalomaki 8y agoI believe this might be the next big thing in EU, crafting specific legislation which allows people to "own the data" stored in various services. The PSD2 directive is already doing this in the banking world. Banks are forced to provide APIs which allow 3rd parties to access customer account information (with permission from the customer) For companies, it makes sense to be pro-active with these things instead of waiting for the legislator to force them to do stuff. If they are active enough, it might be that no legislation is needed.