1. Introduction

Customer data portability barriers refer to practices, contractual restrictions, technological limitations or commercial strategies that prevent or discourage customers from transferring their personal data, transaction histories, account information, preferences and other commercially valuable data from one service provider to another.

Data portability is an important element of competition in digital markets because it enables customers to switch providers without losing valuable information accumulated during their relationship with an existing supplier.

For example, a banking customer may wish to transfer transaction histories and payment instructions to another bank. Similarly, a customer using an e-commerce platform may want to transfer purchase histories, product preferences and reviews to a competing platform.

When an incumbent undertaking deliberately makes such transfers difficult, expensive, incomplete or technically impracticable, data portability barriers may strengthen market power and weaken competition.

The central competition concern is that customer data should not become an artificial instrument of customer lock-in or exclusion of competing businesses.

2. Meaning and Nature of Customer Data Portability Barriers

Customer data portability barriers arise when an undertaking prevents, restricts or materially complicates the transfer or reuse of customer-related information.

Common examples include:

Technical incompatibility between competing service providers.

Refusal to provide customer data in machine-readable formats.

Excessive data extraction or migration charges.

Deliberately complicated account-transfer procedures.

Restrictions on third-party API access.

Contractual prohibitions against transferring customer information.

Delayed processing of portability requests.

Loss of transaction histories during migration.

Incomplete or selectively exported customer records.

Restrictions on interoperability between competing platforms.

These barriers may be particularly harmful in banking, telecommunications, insurance, healthcare technology, cloud computing, e-commerce, social networking and digital payment services.

3. Legal Framework Governing Data Portability and Competition

A. Competition law principles

Customer data portability barriers can engage several competition law doctrines:

1. Abuse of dominant position

A dominant undertaking may abuse its market position by refusing access to essential data, imposing unfair transfer conditions or making switching unnecessarily difficult.

2. Refusal to deal

A refusal to provide necessary data or interoperability access may constitute exclusionary conduct where the applicable legal requirements are satisfied.

3. Tying and bundling

A supplier may make access to customer data conditional upon purchasing additional services, thereby restricting customers' freedom to switch.

4. Exclusive dealing

Contractual provisions may prevent customers or business partners from transferring information to competing suppliers.

5. Raising rivals' costs

An incumbent may impose technical or financial migration costs that make competitors less attractive.

6. Market foreclosure

Data portability restrictions may prevent new entrants from obtaining sufficient customer information to compete effectively.

B. Data protection framework

Competition law must be distinguished from data protection law.

In the European Union, Article 20 of the General Data Protection Regulation (GDPR) establishes a right to data portability, subject to its conditions.

It generally allows individuals to receive certain personal data they have provided to a controller in a structured, commonly used and machine-readable format and, where technically feasible, transmit that data to another controller.

However, this right does not automatically cover every inferred, derived or commercially generated dataset.

C. Digital Markets Act

The EU Digital Markets Act strengthens switching and interoperability obligations for designated gatekeepers in specified circumstances.

Article 6(9), in particular, addresses effective portability of data provided or generated through the use of a core platform service, subject to the statutory conditions.

These obligations can reduce the ability of powerful digital platforms to retain customers through artificial data-transfer restrictions.

4. Major Competition Law Case Laws

The following cases establish the legal principles relevant to data access, interoperability, switching costs, platform dominance and customer lock-in. Not all are direct data-portability judgments; several are foundational competition-law precedents applicable by analogy.

Case 1: Oscar Bronner GmbH & Co. KG v. Mediaprint

Citation: Case C-7/97 (1998), Court of Justice of the European Union.

Facts:

Oscar Bronner operated a newspaper and sought access to Mediaprint's extensive newspaper home-delivery distribution network.

Mediaprint controlled an established distribution infrastructure that was difficult for smaller competitors to replicate.

Legal issue:

Whether a dominant undertaking could be compelled to provide access to infrastructure controlled by it.

Judgment and principle:

The Court established stringent conditions for finding an abusive refusal to supply, including the indispensability of the facility, the likelihood of eliminating effective competition and the absence of objective justification.

Relevance to customer data portability:

A dominant digital platform may argue that its customer database is its proprietary resource and that it should not be compelled to share it with competitors.

Bronner provides the framework for assessing exceptional circumstances in compulsory access cases.

However, not every customer portability request is a competitor's demand for access to an essential facility. A customer's statutory portability right is a distinct legal entitlement.

Case 2: IMS Health GmbH & Co. OHG v. NDC Health GmbH & Co. KG

Citation: Case C-418/01 (2004), CJEU.

Facts:

IMS Health developed a pharmaceutical sales data structure known as the 1860-brick structure.

Competitors relied on the structure because it had become an established format in the pharmaceutical information market.

IMS Health resisted access to its copyrighted structure.

Legal issue:

Whether refusal to license intellectual property that competitors required to operate could constitute abuse of dominance.

Judgment and principle:

The Court identified exceptional conditions for compulsory licensing, including the indispensability of the protected subject matter, exclusion of competition in a secondary market, prevention of a new product for which potential demand existed, and absence of objective justification.

Relevance to customer data portability:

The case is relevant where an incumbent controls a unique customer-data architecture, proprietary database format or information infrastructure.

A competing provider may be unable to reproduce the functionality of an established service without access to a particular data structure.

However, the mere commercial usefulness of customer data does not establish indispensability.

Case 3: Microsoft Corp. v. Commission

Citation: Case T-201/04 (2007), General Court of the European Union.

Facts:

Microsoft controlled the Windows operating system and refused to disclose interoperability information required by competing work-group server operating systems.

The European Commission found that the refusal restricted competitors' ability to develop interoperable products.

Legal issue:

Whether withholding technical interoperability information could amount to abuse of a dominant position.

Judgment and principle:

The General Court substantially upheld the Commission's findings concerning Microsoft's refusal to provide interoperability information.

The decision demonstrated that control over technical information could be used to exclude competitors from adjacent markets.

Relevance to customer data portability:

This is one of the most important analogies for digital portability barriers.

A platform might formally permit customers to download information but provide it in a format that competing providers cannot effectively process.

Examples include:

Incompatible data formats.

Undocumented APIs.

Restricted authentication protocols.

Incomplete technical documentation.

Artificial limitations on data synchronisation.

Effective portability requires usable and interoperable data, not merely the theoretical availability of a download facility.

Case 4: Slovak Telekom a.s. v. European Commission

Citation: Case C-165/19 P (2021), CJEU.

Facts:

The case concerned the conditions imposed by Slovak Telekom on alternative telecommunications operators seeking access to its local-loop infrastructure.

The Commission found that the access conditions formed part of abusive conduct.

Legal issue:

Whether the strict Bronner indispensability test applied where access was already governed by regulatory obligations.

Judgment and principle:

The Court distinguished situations involving voluntary refusal to grant access from situations in which an existing regulatory framework imposed access obligations.

Relevance to customer data portability:

The decision is important where sector-specific legislation already requires data transfer, interoperability or access.

A dominant undertaking cannot automatically rely on the strict rules applicable to an entirely voluntary refusal to provide access when the conduct concerns an existing regulatory obligation.

This principle is particularly relevant to regulated banking, telecommunications and digital-platform services.

Case 5: Google Shopping v. European Commission

Citation: Case T-612/17 (2021), General Court of the European Union.

Facts:

Google gave preferential treatment to its own comparison-shopping service in general search results while rival comparison-shopping services experienced disadvantages in visibility and traffic.

The Commission found that Google's conduct constituted abuse of dominance.

Legal issue:

Whether the preferential treatment of a dominant platform's own service could unlawfully disadvantage competitors.

Judgment and principle:

The General Court upheld the Commission's essential findings concerning Google's abusive self-preferencing conduct.

Relevance to customer data portability:

A platform may permit data transfers to external providers while giving its own affiliated services superior access to customer histories, preferences and behavioural information.

This creates an uneven competitive environment.

The case supports scrutiny of:

Discriminatory data access.

Preferential treatment of affiliated services.

Unequal technical integration.

Exclusion of independent competitors.

Leveraging dominance across connected markets.

It is important to distinguish self-preferencing from portability itself: the judgment did not establish a general right for competitors to obtain customer data.

Case 6: Bundeskartellamt v. Facebook (Meta Platforms)

Citation: B6-22/16, German Federal Cartel Office, 6 February 2019.

Facts:

The German competition authority investigated Facebook's extensive collection and combination of personal data from its own platform and third-party websites and applications.

The authority considered whether Facebook's data practices were connected to its dominant market position.

Legal issue:

Whether the imposition of extensive data-processing conditions by a dominant digital platform could constitute an abuse of dominance.

Decision and principle:

The Bundeskartellamt found that Facebook's data-collection practices constituted an abuse of dominance under German competition law.

The subsequent judicial proceedings involved important questions concerning the relationship between competition law and data protection law.

Relevance to customer data portability:

The case demonstrates that control over personal data can strengthen market power and create competitive advantages that are difficult for new entrants to overcome.

It also illustrates that data-related market power cannot be assessed solely through conventional monetary pricing.

A service offered without a monetary charge may still involve significant competitive concerns arising from data collection and user dependence.

Case 7: Meta Platforms Inc. v. Bundeskartellamt

Citation: Case C-252/21 (2023), Court of Justice of the European Union.

Facts:

The case concerned Meta's processing and combination of personal data collected through Facebook and other services, including third-party sources.

The German competition authority's investigation raised questions about the relationship between the GDPR and competition law.

Legal issue:

Whether a competition authority could consider compliance with data protection law when examining potentially abusive conduct by a dominant digital undertaking.

Judgment and principle:

The CJEU recognised that a competition authority may examine whether data-processing practices comply with the GDPR when that examination is necessary for assessing an abuse of dominance.

However, competition authorities must respect the allocation of responsibilities and cooperate with relevant data-protection authorities.

Relevance to customer data portability:

The case establishes an important connection between data protection and competition enforcement.

A company cannot automatically justify restrictive data practices merely by referring to commercial control over its platform.

At the same time, portability must comply with lawful processing requirements, including the applicable rules concerning consent, purpose limitation and data minimisation.

Case 8: WhatsApp LLC v. Competition Commission of India

Citation: W.P.(C) 4378/2021, Delhi High Court (2021).

Facts:

WhatsApp challenged the Competition Commission of India's investigation into its 2021 privacy policy update.

The CCI had raised concerns regarding the company's market position, data-sharing practices and the potential impact of its policy on competition.

Legal issue:

Whether the CCI could investigate data-related conduct under the Competition Act, 2002.

Judgment and principle:

The Delhi High Court declined to interfere with the CCI investigation at that stage.

The case recognised that issues involving data concentration, interoperability and switching difficulties could fall within competition-law scrutiny.

Relevance to customer data portability:

The judgment is significant for the Indian digital-market context.

Restricted interoperability can make switching between messaging platforms difficult because users may lose access to established communications and social connections.

This demonstrates how network effects and the inability to transfer relevant information can reinforce customer lock-in.

Case 9: Alphabet and Others v. AGCM (Android Auto)

Citation: Case C-233/23, CJEU (2025).

Facts:

The dispute arose from Google's refusal to make Enel X's JuicePass electric-vehicle charging application compatible with Android Auto.

The issue involved access to the technical interoperability framework of a dominant digital platform.

Legal issue:

Whether a dominant platform's refusal to provide interoperability could constitute abuse even where the requesting service could operate independently of the platform.

Judgment and principle:

The CJEU clarified the application of Article 102 TFEU to interoperability refusals, distinguishing certain situations involving an existing platform ecosystem from the exceptional refusal-to-supply circumstances governed by the strict Bronner test.

Relevance to customer data portability:

The case is important because it demonstrates that competition concerns may arise when a platform obstructs interoperability between services.

A digital provider should not be able to undermine competing services simply by controlling the technical environment through which customers access complementary products.

It is particularly relevant to mobile applications, payment services, connected vehicles and digital ecosystems.

5. Principal Competition Issues Arising from Customer Data Portability Barriers

A. Artificial switching costs

Customers may remain with an existing supplier because transferring their accumulated information is expensive or difficult.

For example, a business using cloud accounting software may hesitate to change providers if years of financial records cannot be transferred.

Such conduct can reduce competitive pressure even when rival providers offer lower prices or better services.

B. Data-based entry barriers

Large digital companies accumulate extensive customer information through their established operations.

New entrants may lack access to comparable historical information.

Consequently, incumbents may enjoy advantages in:

Personalisation.

Predictive analytics.

Customer segmentation.

Fraud detection.

Recommendation systems.

Artificial intelligence training and optimisation.

C. Network effects

Some services become more valuable as additional users join them.

Messaging applications and professional networking platforms are examples.

If users cannot transfer contacts, conversations or relevant social connections, they may be reluctant to switch.

This can reinforce the market position of established platforms.

D. Discriminatory API access

An incumbent may offer its affiliated businesses high-quality API access while restricting competing providers.

This can create unequal opportunities in the market.

E. Excessive migration charges

A dominant supplier may impose disproportionately high charges for transferring customer data.

Such charges can discourage switching and raise rivals' costs.

However, reasonable charges reflecting genuine technical expenses may be objectively justified where permitted by law.

F. Incomplete data transfers

A supplier may provide only basic account information while withholding important transaction histories, preferences or other information within the applicable portability entitlement.

The resulting transfer may be technically possible but commercially ineffective.

6. Sector-Wise Examples of Customer Data Portability Barriers

7. Economic Analysis of Portability Barriers

Competition authorities should examine the following economic factors.

1. Switching costs: Determine whether customers incur substantial financial, technical or administrative costs when changing suppliers.

2. Network effects: Examine whether customer dependence increases as more users join the platform.

3. Data uniqueness: Determine whether the incumbent possesses datasets that competitors cannot reasonably reproduce.

4. Market concentration: Examine whether a small number of undertakings control important customer-data infrastructure.

5. Multi-homing: Determine whether customers can use multiple competing services simultaneously.

6. Entry barriers: Assess whether restrictions on data transfer prevent new businesses from entering the market.

7. Consumer welfare: Evaluate whether restrictions reduce choice, innovation, quality or price competition.

The OECD has identified the potential relationship between restricted data access, increased switching costs, customer lock-in and limitations on multi-homing.

OECD+1

8. Legal Remedies Against Customer Data Portability Barriers

Competition authorities and sectoral regulators may consider several remedies.

A. Mandatory data portability

Dominant undertakings may be required, where legally justified, to provide customers with effective mechanisms to transfer eligible data.

B. Interoperability obligations

Companies may be required to establish compatible technical standards and APIs.

C. Prohibition of discriminatory restrictions

An undertaking may be prohibited from giving its own affiliated services preferential access to portability infrastructure.

D. Reduction of unreasonable migration charges

Regulators may scrutinise excessive data-transfer fees and prohibit unjustified charges.

E. Standardised data formats

Common technical standards can reduce the costs associated with transferring information between competing providers.

F. Real-time data access

Where legislation requires it, customers and authorised third parties may receive continuous access to relevant information.

G. Structural and behavioural remedies

In serious cases, authorities may consider behavioural commitments, access obligations, monitoring arrangements and other remedies proportionate to the competitive harm.

The EU Digital Markets Act illustrates this regulatory approach through Article 6(9), which establishes portability obligations for designated gatekeepers.

European Commission+1

9. Challenges in Enforcing Customer Data Portability

Several difficulties arise when enforcing portability obligations.

1. Privacy concerns: Transferring customer information must comply with applicable data protection requirements.

2. Cybersecurity risks: Unrestricted access may expose sensitive information to unauthorised parties.

3. Intellectual property: Portability does not automatically require disclosure of proprietary algorithms, source code or protected commercial information.

4. Technical complexity: Different providers may use incompatible databases and architectures.

5. Data ownership disputes: Customer-provided data, observed data and inferred data may receive different legal treatment.

6. Commercial confidentiality: Transfers must protect legitimate confidential information and third-party rights.

7. Regulatory coordination: Competition authorities, data-protection authorities and sectoral regulators may have overlapping responsibilities.

8. Remedy implementation: A formal right to transfer data may be ineffective without practical technical arrangements.

10. Important Distinction: Data Portability Versus Data Access

These concepts should not be treated as interchangeable.

For example, a customer may have a right to transfer personal information from one banking provider to another. That does not automatically entitle every competing bank to access the incumbent's entire customer database.

This distinction is especially important when applying Article 20 GDPR and the essential-facilities doctrine.

11. Application Under Indian Competition Law

Where the relevant conduct occurs in India, the principal statutory framework is the Competition Act, 2002.

Section 4 – Abuse of dominant position

Section 4 is particularly relevant to customer data portability barriers.

Potentially relevant provisions include:

Section 4(2)(a): Imposition of unfair or discriminatory conditions or prices.

Section 4(2)(c): Practice resulting in denial of market access.

Section 4(2)(e): Using a dominant position in one relevant market to enter into or protect another relevant market.

Section 3 – Anti-competitive agreements

Section 3 may apply where agreements between competing or vertically related enterprises restrict data portability or interoperability and satisfy the applicable statutory requirements.

Section 19 – Inquiry into abuse of dominance

The CCI may consider factors such as market structure, entry barriers, consumer dependence, market power and the competitive effects of the challenged conduct.

Section 26 – Investigation

Where the statutory requirements are met, the CCI may direct an investigation into potentially abusive practices.

Section 27 – Orders by the Commission

The CCI may issue appropriate orders, including directions to discontinue abusive conduct and monetary penalties in accordance with the Act.

The WhatsApp litigation discussed above is particularly relevant to the relationship between data concentration, interoperability, switching difficulties and competition enforcement in India.

12. Compliance and Governance Framework for Businesses

Businesses should implement a structured data-portability compliance programme.

13. Critical Legal Analysis

Customer data portability barriers present a significant challenge to modern competition policy because traditional competition law often focuses on prices, output and market shares, whereas digital competition increasingly depends on access to information and technological interoperability.

A business may offer services without monetary charges while retaining considerable market power through accumulated customer data.

In such circumstances, conventional price-based analysis may fail to identify the real competitive harm.

Nevertheless, mandatory portability should not become an unrestricted obligation to disclose all commercially valuable information.

Competition authorities must distinguish between:

Legitimate protection of confidential information.

Lawful personal-data processing restrictions.

Genuine cybersecurity requirements.

Reasonable technical limitations.

Artificial restrictions designed to prevent customers from switching.

Exclusionary practices intended to protect dominant market positions.

An effective legal framework should therefore balance consumer autonomy, data protection, cybersecurity, innovation and competitive market access.

14. Conclusion

Customer data portability barriers can operate as significant instruments of market foreclosure, customer lock-in and preservation of dominant market positions.

Restrictions involving incompatible formats, excessive migration fees, discriminatory API access, incomplete transfers and contractual limitations can weaken competition by making customers dependent on incumbent service providers.

The cases of Bronner, IMS Health, Microsoft, Slovak Telekom, Google Shopping, Facebook/Bundeskartellamt, Meta v. Bundeskartellamt and WhatsApp v. CCI provide important legal foundations for analysing these practices.

The central legal proposition is that control over customer data must not be used as an unjustified mechanism for excluding competitors or preventing customers from exercising legally recognised portability rights.

Competition law should promote effective switching, interoperability, fair access and innovation while respecting legitimate privacy, security and intellectual-property protections.

Important academic qualification: The eight principal cases above are not all direct judgments on customer data portability. They establish related doctrines concerning refusal to supply, interoperability, data concentration, self-preferencing and switching barriers. This distinction is essential when using them in examinations, legal opinions or research papers.

The discussion is comparative, with particular reference to EU and Indian competition law, rather than a jurisdiction-specific statement of law.