1. Introduction

Data access portability remedies in competition law are measures designed to enable consumers, businesses, and competing service providers to transfer, retrieve, or reuse relevant data so that dominant firms cannot unfairly lock users into their platforms or prevent competitors from entering the market.

These remedies address a central problem in digital markets: a company may accumulate extensive customer data, behavioral histories, transaction records, social connections, or business-performance information. When users cannot transfer that information to another provider, switching becomes costly, competitors struggle to attract customers, and the incumbent may reinforce its market power.

Data portability and data access are related but distinct concepts:

Data portability allows a user to obtain and transfer their data to another service.

Data access enables another undertaking to obtain specified data, sometimes through an interface or interoperability mechanism, subject to legal conditions.

Competition remedies seek to correct market distortions, such as exclusionary conduct, barriers to entry, or anticompetitive restrictions on switching.

The legal challenge is to improve competition without compelling firms to disclose trade secrets, violate privacy rights, undermine cybersecurity, or surrender information that they have no legal duty to share.

2. Legal foundations and objectives

Data portability remedies may arise under competition statutes, data-protection legislation, digital-market regulation, or negotiated commitments imposed by competition authorities.

Their principal objectives are:

Reducing switching costs: Users can move to a rival without losing valuable historical information.

Preventing data-based exclusion: A dominant undertaking cannot use exclusive control of essential commercial information to obstruct competitors unlawfully.

Facilitating market entry: New businesses can offer competing services without having to recreate every user's historical dataset.

Improving innovation: Competing firms can develop new products using lawfully accessible information.

Protecting consumer choice: Users retain practical control over their ability to change providers.

Portability does not automatically establish a right to obtain every dataset held by a competitor. The applicable legal framework, the nature of the data, the undertaking's market power, and the effects on competition all matter.

3. Major legal frameworks

A. European Union competition law

Article 102 of the Treaty on the Functioning of the European Union (TFEU) prohibits the abuse of a dominant position. Depending on the circumstances, exclusionary conduct involving data may include refusal of access, discriminatory access conditions, tying, or restrictions that prevent effective competition.

Article 102 does not establish a general obligation for every dominant firm to share its data. A competition authority must identify the relevant abuse and establish the legal requirements for the remedy.

Digital Markets Act (DMA)

The EU's Digital Markets Act provides a more direct regulatory framework for designated gatekeepers.

Article 6(9): Requires gatekeepers to provide end users and authorised third parties with effective portability of data provided or generated through the use of the platform, including appropriate tools and continuous, real-time access.

Article 6(10): Provides business users and authorised third parties with access to specified aggregated and non-aggregated data generated through their business use of the gatekeeper's platform, subject to the statutory conditions.

These obligations differ from traditional antitrust remedies because they impose specified duties on designated gatekeepers without requiring a separate finding of abuse in every individual portability dispute.

Digital Markets Act (DMA)+1

Official resources: European Commission — End-user data portability.

B. European Union data-protection law

Article 20 of the General Data Protection Regulation (GDPR) establishes a right to data portability where the relevant conditions are satisfied.

The right generally covers personal data concerning an individual that the individual has provided to a controller, where processing is automated and based on consent or a contract. Data must be supplied in a structured, commonly used, machine-readable format, and direct transmission must be facilitated where technically feasible.

However, Article 20 is not a general competition-law right to all information held by a platform. Its scope is narrower than some competition remedies, and it must not adversely affect the rights and freedoms of others.

EUR-Lex+1

Official text: GDPR, Article 20.

C. United Kingdom digital markets regulation

The UK's Digital Markets, Competition and Consumers Act 2024 introduced a regime for firms designated as having strategic market status.

A particularly relevant development is the Competition and Markets Authority's 17 June 2026 data-portability conduct requirement concerning Google's general search services. The requirement calls for tools that allow authorised third parties to obtain consumers' search data free of charge. The CMA published its decision and related materials through its official portal.

GOV.UK

This illustrates how competition regulation can move beyond a one-off remedy following proven abuse and impose targeted conduct requirements on a designated firm.

4. Principal case laws

The following judgments establish the doctrinal foundation for data-access and portability remedies. Some concern access to infrastructure, copyrighted material, or technical information rather than personal-data portability directly. Their relevance lies in the principles governing compulsory access, exclusion, interoperability, and proportionality.

Case 1: Oscar Bronner GmbH & Co. KG v Mediaprint

Court of Justice of the European Union (CJEU), Case C-7/97, judgment of 26 November 1998.

Facts: A newspaper publisher sought access to a rival publisher's home-delivery distribution system, which gave the incumbent an important competitive advantage.

Legal issue: Could a dominant undertaking be compelled to provide a competitor with access to infrastructure it had developed for its own business?

Decision and principle: The Court applied a strict test to compulsory access. In the essential-facilities context, the requested facility had to be indispensable, refusal had to be capable of eliminating all competition in the relevant market, and the refusal had to lack objective justification.

Application to data portability: A competitor seeking access to a dominant platform's proprietary dataset cannot merely argue that the information would be useful or commercially valuable. Where the claim falls within the essential-facilities doctrine, the demanding Bronner criteria may apply.

However, not every competition claim involving data is a Bronner refusal-to-supply case. The legal test depends on the conduct alleged.

Source:

Cour de justice de l’Union européenne+1

Case 2: IMS Health GmbH & Co. OHG v NDC Health GmbH & Co. KG

CJEU, Case C-418/01, judgment of 29 April 2004.

Facts: The dispute concerned a copyrighted regional-sales-data structure used in the pharmaceutical industry. A competitor sought access to a structure that had become important for competing in the market.

Legal issue: Under what exceptional circumstances can refusal to license intellectual property constitute an abuse of dominance?

Decision and principle: The Court identified stringent conditions, including indispensability, the risk of eliminating competition in a secondary market, the prevention of a new product for which there was potential consumer demand, and the absence of objective justification.

Application to data portability: Where a remedy would require access to protected databases, proprietary data structures, or intellectual property, an authority must examine both the competitive necessity and the rights of the data holder. The mere fact that data would help a rival compete is not sufficient.

The IMS Health judgment is especially relevant where access to a database is necessary to offer a new or improved product rather than merely to replicate an incumbent's existing offering.

Source:

EUR-Lex+1

Case 3: Microsoft Corp. v Commission

General Court of the European Union, Case T-201/04, judgment of 17 September 2007.

Facts: Microsoft was found to have abused its dominant position by refusing to supply interoperability information needed by competing work-group server operating-system suppliers.

Legal issue: Could withholding technical information obstruct competition in a neighbouring market?

Decision and principle: The Court upheld the central finding of abuse concerning the refusal to provide interoperability information, applying the exceptional-circumstances framework and recognising the importance of enabling competitors to develop improved products.

Application to data portability: The case supports remedies requiring disclosure of technical specifications or interfaces where access is necessary to achieve interoperability and the legal conditions for intervention are satisfied.

For example, a competition authority might require a platform to provide a documented API, data-transfer protocol, or technical interface so that authorised rival services can function effectively.

The case does not establish that all commercially valuable data must be disclosed. Nor does it mean that every interoperability obligation is legally equivalent to compulsory licensing of a dataset.

Source:

CASE T-201/04+1

Case 4: Magill — RTE and ITP v Commission

CJEU, Joined Cases C-241/91 P and C-242/91 P, judgment of 6 April 1995.

Facts: Broadcasters refused to license their programme listings to a publisher seeking to produce a comprehensive weekly television guide.

Legal issue: Could refusal to license copyrighted information prevent the development of a product consumers wanted?

Principle: The Court recognised that a refusal to license intellectual property could constitute abuse in exceptional circumstances, including where it prevented the emergence of a new product and eliminated competition, without objective justification.

Application to data access: The decision is relevant when a dominant data holder controls information needed to create a distinct service that consumers would otherwise lack. It also illustrates the need to distinguish genuine product innovation from straightforward imitation.

Source: EUR-Lex — official EU case-law database (search for RTE and ITP v Commission, Joined Cases C-241/91 P and C-242/91 P).

Case 5: Google Shopping

General Court, Case T-612/17, judgment of 10 November 2021.

Facts: Google was found to have favoured its own comparison-shopping service in general search results while treating competing comparison-shopping services less favourably.

Legal issue: Did the conduct constitute abusive self-preferencing, and was the strict Bronner test necessarily applicable?

Decision and principle: The General Court upheld the Commission's infringement finding. The case concerned discriminatory treatment and the leveraging of dominance rather than a straightforward demand that Google build or share an indispensable facility for a rival.

Application to data portability: Where a platform gives its own services superior access to data or technical functionality while disadvantaging competing services, an authority may examine discrimination and leveraging rather than automatically applying the strict refusal-to-supply test.

The judgment therefore supports careful classification of the alleged abuse before selecting a remedy.

Source:

EUR-Lex

Case 6: United States v. Microsoft Corp.

United States Court of Appeals for the District of Columbia Circuit, 253 F.3d 34 (D.C. Cir. 2001).

Facts: Microsoft used practices involving its Windows operating-system monopoly that the US government challenged as exclusionary, particularly in relation to browser competition.

Legal principle: The appellate court upheld important findings of monopolisation and examined how exclusionary conduct could protect monopoly power and restrict competition.

Application to data portability: The judgment is relevant by analogy when a dominant digital platform uses technical restrictions, default settings, or control over an ecosystem to impede rival services. It supports remedies directed at the exclusionary conduct itself, but it is not a direct holding establishing a general data-portability right.

Case 7: Aspen Skiing Co. v. Aspen Highlands Skiing Corp.

US Supreme Court, 472 U.S. 585 (1985).

Facts: A dominant ski operator discontinued a previously profitable joint-ticket arrangement with a smaller competitor.

Legal principle: In the particular circumstances, the refusal to continue dealing supported a finding of monopolisation under US antitrust law.

Application to data portability: The case illustrates why an abrupt withdrawal of an established data-sharing arrangement may raise competition concerns, particularly if the conduct sacrifices short-term commercial benefits to exclude a rival.

However, Aspen Skiing is an exceptional refusal-to-deal case, not a general rule compelling firms to share data with competitors.

5. Indian competition law: statutory framework

In India, the principal legislation is the Competition Act, 2002.

Section 4: Abuse of dominant position

Section 4 is particularly relevant when a dominant digital platform uses its control over data to impose unfair conditions, restrict market access, or leverage its position into another market.

Potentially relevant provisions include:

Section 4(2)(a)(i): Imposing unfair or discriminatory conditions in the purchase or sale of goods or services.

Section 4(2)(c): Denying market access in any manner.

Section 4(2)(e): Using a dominant position in one relevant market to enter into, or protect, another relevant market.

These provisions may support intervention where a dominant undertaking's data practices create exclusionary effects. But a claimant must establish the relevant statutory elements; possession of extensive data alone does not establish an infringement.

Section 27: Remedies and directions

Where the Competition Commission of India (CCI) establishes a contravention, Section 27 provides powers to issue appropriate directions, including orders requiring the enterprise to discontinue the abusive conduct and not repeat it.

Depending on the case, remedies could address:

Unfair restrictions on user data transfers.

Discriminatory access to data or technical interfaces.

Data-sharing practices that foreclose advertising or other markets.

Contractual restrictions that prevent effective switching.

Inadequate mechanisms for users to control competitively significant data sharing.

The exact remedy must be connected to the established infringement and supported by a reasoned assessment.

6. Important Indian case law: WhatsApp and Meta

In Re: Updated Terms of Service and Privacy Policy for WhatsApp Users

Competition Commission of India, Suo Motu Case No. 01 of 2021 and connected matters, order dated 18 November 2024.

Related appeal: WhatsApp LLC and Meta Platforms, Inc. v Competition Commission of India, NCLAT, judgment dated 4 November 2025.

This is one of India's most important digital-competition disputes involving data.

Facts: WhatsApp's 2021 privacy-policy update expanded data-sharing arrangements with Meta companies. The CCI examined the mandatory nature of the policy, the scope of data sharing, WhatsApp's market position, and the consequences for competing businesses.

CCI's findings: The CCI found that the policy and associated conduct infringed provisions of Section 4, including unfair conditions and denial of market access. It imposed a penalty of ₹213.14 crore and ordered behavioural remedies, including restrictions on certain advertising-related data sharing and greater user choice over other sharing.

CCI+1

NCLAT's decision: On 4 November 2025, the National Company Law Appellate Tribunal largely upheld the CCI's substantive findings, including violations of Sections 4(2)(a)(i) and 4(2)(c), while rejecting the finding under Section 4(2)(e). The Tribunal also scrutinised the justification for the particular remedies imposed.

Indian Kanoon+1

Why the case matters for data portability remedies:

Data control affects competition: The way a dominant platform collects and shares user data may affect market power in related markets.

Privacy is a competitive parameter: Reduced privacy and coercive terms can be relevant to assessing service quality and consumer welfare.

User choice matters: Meaningful choices about data sharing can reduce the ability of a dominant platform to impose unfair conditions.

Remedies require justification: Even when an infringement is established, a particular remedy must have an adequate legal and evidential basis.

An important distinction is that the WhatsApp case primarily concerns unfair data-sharing practices, not a direct order compelling WhatsApp to export user data to competing messaging services. It is therefore highly relevant to the broader data-governance and competition analysis, but should not be cited as a direct holding on portability.

Official records: CCI — WhatsApp privacy-policy case and NCLAT judgment dated 4 November 2025.

7. Types of data-access portability remedies

Competition authorities can choose among several remedies depending on the nature of the infringement.

1. User-controlled data export

The platform must provide data in a structured, machine-readable format so users can transfer their information to a rival. This is appropriate where switching barriers arise from loss of user history, records, or content.

2. Direct portability and interoperability

Authorised third parties receive data through APIs or other secure interfaces, with user authorisation where required. This can enable ongoing transfer rather than a one-time download.

3. Targeted third-party data access

The dominant firm must provide specified categories of data to qualifying competitors or business users, where legally justified. Scope, purpose, recipients, and safeguards should be precisely defined.

4. Non-discrimination requirements

A platform may be required to provide rival services with equivalent access conditions to those enjoyed by its own competing service, where the relevant discrimination constitutes an infringement.

5. Governance, auditing, and compliance monitoring

Independent audits, access logs, technical reporting, and complaint mechanisms can help ensure that a portability order works in practice rather than remaining a formal obligation.

8. Legal test for imposing a portability remedy

A competition authority or court should ordinarily consider the following questions.

Market power: Does the undertaking possess dominance or fall within a statutory digital-gatekeeper regime?

Conduct: Is there a refusal to supply, discriminatory treatment, exclusionary restriction, unfair contractual condition, or another recognised infringement?

Competitive harm: Does the conduct raise switching costs, foreclose rivals, reinforce network effects, or prevent entry or expansion?

Necessity: Is portability or access needed to address the identified harm, or would a less intrusive remedy work?

Scope: Which categories of data should be transferred, to whom, for what purpose, and at what frequency?

Proportionality: Will the remedy correct the infringement without imposing excessive costs or unnecessarily undermining investment incentives?

Monitoring: Can compliance be objectively measured through service-level requirements, testing, and independent verification?

Where compulsory access amounts to an essential-facilities remedy, the applicable jurisdiction's refusal-to-deal doctrine must also be considered. In contrast, a remedy addressing discriminatory treatment or an obligation expressly imposed by digital-market legislation may follow a different legal analysis.

9. Privacy, cybersecurity, and intellectual-property safeguards

A lawful portability remedy should address competing rights and risks rather than treating all data as freely transferable.

The central principle is that data portability must be effective enough to promote competition but sufficiently limited to protect legitimate rights and interests.

10. Practical example

Suppose a dominant online marketplace holds sellers' historical sales records, customer reviews, inventory information, and performance metrics. A rival marketplace cannot attract established sellers because moving platforms means losing commercially important records.

A competition authority might consider a remedy requiring the incumbent to provide sellers with a machine-readable export of their own transaction histories and other legally transferable information.

If the evidence additionally demonstrates that discriminatory restrictions on a technical interface are foreclosing competition, the authority might consider a secure API or non-discriminatory access obligation.

However, the remedy should not automatically transfer confidential information about other sellers, unrestricted customer identities, proprietary algorithms, or every dataset generated by the incumbent. Each category needs a legal and competitive justification.

11. Challenges in enforcing portability remedies

Technical complexity: Legacy systems, incompatible data formats, and changing APIs can make implementation expensive.

Strategic compliance: A firm might formally permit exports but make them incomplete, slow, or difficult to use.

Privacy conflicts: Data concerning multiple individuals or businesses may not be transferable without additional safeguards.

Investment incentives: Unrestricted compulsory sharing may discourage firms from investing in data collection and innovative services.

Remedy design: An authority may struggle to determine which data is necessary, whether access should be continuous, and how long an obligation should remain in place.

Cross-border enforcement: Data protection, localisation rules, confidentiality obligations, and differing competition regimes may complicate transfers.

These challenges favour remedies that specify the data covered, the technical standards, the authorisation process, measurable performance requirements, and a procedure for resolving disputes.

12. Conclusion

Data access portability remedies are an important tool for addressing digital-market lock-in, exclusionary control over information, and barriers to competition. Their legal foundation comes from a combination of abuse-of-dominance doctrine, interoperability jurisprudence, data-protection rights, and modern digital-market regulation.

The principal cases establish complementary propositions:

Bronner imposes a demanding standard for certain compulsory-access claims.

IMS Health and Magill address exceptional access to protected information and intellectual property.

Microsoft demonstrates the competition significance of interoperability information.

Google Shopping illustrates how discriminatory treatment can be assessed without automatically treating every dispute as a refusal-to-supply case.

The Indian WhatsApp–Meta proceedings demonstrate that data practices and privacy-related service quality can be relevant to abuse-of-dominance analysis, while also highlighting the need for carefully justified remedies.

The ultimate legal objective is not universal data sharing. It is to ensure that control over data does not unlawfully prevent effective competition, while preserving privacy, security, intellectual-property rights, and incentives to innovate.

For a more jurisdiction-specific legal analysis, the next useful step would be to examine data portability remedies under Section 27 of India's Competition Act, 2002, with statutory provisions, the WhatsApp–Meta proceedings, and relevant Indian and comparative precedents.