The Open Standard for Transport & Mobility sector GDPR Compliance

The General Data Protection Regulation (GDPR) is a regulation in the European Union (EU) that outlines the rights of individuals with regards to their personal data. The UK’s implementation of the GDPR is the Data Protection Act 2018 (DPA 2018). The DPA 2018 is very similar to the GDPR and sets out the same rights for individuals and obligations for organizations.

One of the rights that the GDPR provides is the right to data portability. This right allows individuals to request that the data controller (the entity that collects and processes their personal data) provides them with a copy of their personal data in a structured, commonly used, and machine-readable format. Individuals can also request that the data controller transmit their personal data directly to another data controller, if technically feasible.

In fact, Data controllers are encouraged by the legislation to develop interoperable formats that enable data portability.

For the transport sector, this means that a customer has the right to move, copy or transfer personal data easily out of an account for one provider mobility and into another … in safe and secure way, without affecting its usability and ‘without hindrance’.

Our Open Standard API specification for exchanging data between different transport & mobility accounts uses JSON – a structured, commonly-used and machine readable format.
It therefore enables interoperability between each system, but without them all having to maintain compatibility with each other.

If you are a Data Controller or transport & mobility technology supplier and would like to know more, please contact us: contact@opentransport.co.uk