Bonus points if companies are also required to allow users to import data in those formats. That would make it easier to avoid being locked into a specific platform: export your data from the old one, import it into the new one.
Before you say that this is impractical -- Google requires that other companies submit data to it in very specific formats (eg, product listings), so I don't see why governments can't impose similar requirements on companies, too.
It probably wouldn't be applicable for companies with highly-specific data models, though.
Interoperability seems a little difficult to enforce, like brokers that don't support fractional shares might need to start supporting them to import data from other brokers. Edit: I guess this example is poor but I just wanted to point out that schema/interop also involves data domain, validation, etc.
[0] https://ec.europa.eu/info/law/law-topic/data-protection/refo...
[1] https://www2.deloitte.com/ch/en/pages/risk/articles/gdpr-dat...
Article 20 [RIGHT TO DATA PORTABILITY]
1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: ...GDPR has its warts, absolutely. But I don't think that's a reason not to strive for even greater data protection measures for citizens going forward, especially if we amend the existing regulations to fix some of its unintended consequences.
[edit: typo]
> Article 20 \n Right to data portability \n 1. The data subject [you] shall have the right to receive the personal data concerning him or her, which he or she has provided to [the company], in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
Regarding importing: you as a user have the right to provide your downloaded data to a different party, but there's nothing in GDPR that says that party must offer the necessary import capability.
okay yeah you're still describing Article 20:
> the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible
link?
"Request Your Personal Information" help article: https://www.amazon.com/gp/help/customer/display.html?nodeId=...
amazon.com link: https://www.amazon.com/gp/privacycentral/dsar/preview.html
amazon.de link: https://www.amazon.de/gp/privacycentral/dsar/preview.html
(They don't even mention "GDPR" on that page but that should be GDPR compliant.)