receive a copy of their personal data — It's easy for your customers to receive a copy of their personal data in a format that can be easily transferred to another company
This means that you should be able to send their personal data (Article 20) in a commonly readable format (e.g. a spreadsheet) either to them or to a third party they designate. This may seem unfair from a business standpoint in that you may have to turn over your customers' data to a competitor. But from privacy standpoint, the idea is that people own their data, not you.
| Property | Value |
|---|
| Section | Privacy rights |
| Owner | operator |
Mapped Controls
| Control | Title |
|---|
| SID-ARCH-02 | Operator-Scope Compliance Obligations |
Source: GDPR Checklist for Data Controllers