Data Portability

Data portability is the right of individuals and businesses to obtain their data in a structured, commonly used, machine-readable format and move it to another provider. In AI governance, it matters because training data, user prompts, generated outputs, and fine-tuned model artifacts can all fall under portability obligations, most notably under the EU's General Data Protection Regulation (GDPR) Article 20. Compliance teams need to decide which AI-related data sets are in scope and how exports will be produced without exposing trade secrets or other people's personal information.

1 item

Corporate PolicyUS2026-10-25

GSA's Anti-Lock-In AI Clause Has an Enforcement Gap Resellers Cannot Close

The U.S. General Services Administration (GSA) has introduced a contract clause requiring AI vendors to support data portability and avoid terms that impede migration. A practitioner commentary argues the clause cannot be enforced against the AI developers who actually control data formats and licensing. Those developers are typically not parties to the government's contract when purchases flow through resellers or systems integrators. The structural gap affects any organization relying on contract language alone to manage AI vendor lock-in risk.

vendor lock-in AI procurement GSA data portability third-party AI risk supply chain governance US federal