Providers must provide clear and comprehensible terms for provider switching in their contracts. Customers must be able to understand before concluding a contract which rights they have with respect to exporting data, terminating a contract and receiving assistance from a provider. This information must be available, for example, in general terms and conditions, in pre-contractual documentation or on a provider’s website.
All of the parties involved, including destination data processing service providers, must work together constructively to ensure that switching is completed effectively, data are transferred in time and continuity of the data processing services is maintained.
As technical conditions vary considerably in practice, it makes sense to distinguish between two switching scenarios: scenario A with a low level of technical complexity and scenario B with a high level of complexity.
Scenario A – low level of technical complexity
Scenario A is the standard case. Switching is technically feasible without a large degree of complexity.
1. Switching request/notice period
A customer notifies their provider that they want to terminate their contract or switch to another provider. In accordance with the notice period set in the Data Act, the provider then has a maximum of two months to make the technical preparations.
2. Transitional period
The technical switching process then begins. The process must be completed within a transitional period of 30 calendar days.
Important: A customer may extend the transitional period once for a period that they consider more appropriate, for example if they need more time for tests or preparations. This extension does not have to be based on specific technical reasons.
During the agreed transitional period, the data must be transferred, the necessary technical interfaces must be in place and the new provider must be able to put the applications into operation. The original service must still be accessible during this period.
3. Completion of switching and post-switching period
The data must remain retrievable from the old provider for at least 30 calendar days after the switching process has been completed. This enables final backups to be made or missing data to be added. The data must be erased after this retrieval period, unless there is a legal reason for retaining the data.
Scenario B – high level of technical complexity
In some cases, such as in the case of very complex IT environments, provider switching is not technically feasible within 30 calendar days. In this case, the Data Act allows the period to be extended.
1. Switching request/notice period
The following applies here as well: A customer notifies their provider that they want to terminate their contract or switch to another provider. In accordance with the notice period set in the Data Act, the provider has a maximum of two months to make the technical preparations. If the provider establishes that switching within the subsequent 30-day transitional period is not technically feasible, the provider must inform the customer within 14 working days and prove that switching within the period would not be technically feasible.
2. Alternative transitional period
If a provider proves that switching within the 30-day transitional period would not be technically feasible, the provider can extend the transitional period to a maximum of seven months.
Important: In this scenario as well, a customer can also voluntarily extend the transitional period for a period that they consider more appropriate for their own purposes, irrespective of any technical reasons.
During the agreed transitional period, the data must be transferred, the necessary technical interfaces must be in place and the new provider must be able to put the applications into operation. The original service must be maintained during this period.
3. Completion of switching and post-switching period
As in scenario A, the data must remain retrievable from the old provider for at least 30 calendar days after the switching process has been completed. The data must be erased after this retrieval period unless there is a legal reason for retaining the data.