What is Data Portability Clause?

Data portability is the contractual right to take your data with you when you leave a vendor. It sounds straightforward, but the details determine whether the right is meaningful or purely theoretical.

The first issue is format. A vendor that exports your data as a proprietary binary file or a PDF dump has technically complied with a portability requirement but given you something largely unusable. A well-drafted clause specifies machine-readable, open formats: CSV, JSON, XML, or SQL database exports. For healthcare systems, HL7 FHIR or similar interoperability standards may be required. The format must allow the new vendor to import the data without manual re-entry.

Timeline is the second critical element. A clause that grants portability "upon termination" without specifying a deadline gives the vendor no incentive to act quickly. Best practice is to set a specific window: all data exported within 30 days of the termination date, with a further 30-day period during which the vendor retains a copy as backup before permanent deletion. For a healthcare provider managing 10,000 patient records, a 90-day migration window may be more realistic.

Cost allocation matters more than many businesses expect. Some vendors comply with portability requirements but charge £15,000 or more for a "custom data export." If the contract does not address export costs, you have no basis to object. The clause should state that standard data export is included in the contract price, with any custom work quoted in advance.

For IT-dependent businesses, data portability is directly linked to business continuity. A managed service provider holding three years of operational data has significant power if the contract ends acrimoniously. Without a portability clause, the transition to a new provider can take months instead of weeks, with every delay costing money.

The interaction with data processing agreements (DPAs) under GDPR is also relevant. Under Article 20 GDPR, data subjects have a right to data portability for personal data. A contractual data portability clause extends this principle to all business data, not just personal data covered by regulation.

Vendor lock-in is one of the most expensive consequences of poor contract management. When your data is trapped inside a system you want to leave, switching costs multiply. According to Weshare (2025), 95% of organisations lack full visibility into their contractual obligations, and data portability terms are among the most commonly overlooked provisions. The cost of migrating without a portability clause can easily reach tens of thousands of pounds for a mid-sized business, turning a simple vendor switch into a major project.