Getting useful data out of a platform with GDPR?

[mavhc]

Is there a magic GDPR incantation I can use to get a company to export all our data in a useful format, instead of them just saying: run every report and save PDFs?

[Aprice]

If someone finds one, might be worth letting Bromcom and Arbour know for their SIMS export battle!

[PotNoodleTech]

You'd probably have to hire a legal bod to stand any chance of forcing them to export how you want it.

[Seb1780]

Is there a magic GDPR incantation I can use to get a company to export all our data in a useful format, instead of them just saying: run every report and save PDFs?

 

Check the T&Cs - most reputable organisations we deal with have a clause specifically about data transfer at the end of the contract.

[dmj]

Check the T&Cs - most reputable organisations we deal with have a clause specifically about data transfer at the end of the contract.

Do any of the UK MIS provider fit the description of reputable organisations?

[Seb1780]

Do any of the UK MIS provider fit the description of reputable organisations?

 

:-) We've got these terms in our new one!

[psydii]

If they at any point act as the Data Controller (by, for example, providing your users access to their data on a website) then they are required to have mechanisms to meet the "Data Portability" requirement of GDPR and a pdf is not good enough.

 

Now the right to get at the portable data is between data subjects and data controllers, and if the are a data controller, they *must* have such mechanisms, and it would be quite unreasonable for them to refuse to export the data to yourselves (the initial data controller who contracted with them to provide the transformation/access to yourselves and the data subjects).

 

Also since you are the data controller, and a data subject could request this of you, then the processor must be able to provide you the data in a suitable format so that you can comply with such a request.

 

That said - we asked a company recently if they could give us a list of the unique IDs linked to student emails in their system (so we could do something clever with QR codes), and they said "no that's propitiatory" even though the UIDs are in the url of each students record. ::shrug::