Data portability is the ability to move information between services, platforms, or internal systems without unusable friction. In practice, that means data can be exported, imported, and reused in documented formats with enough context to remain meaningful, such as metadata, schemas, and access controls.
In cyber security, portability matters because control over data is part of resilience. If a vendor outage, contract dispute, legal restriction, or migration problem blocks export, an organization can lose access to its own information even when no breach has occurred. Defenders reduce this risk with open formats, tested restore and migration procedures, clear data ownership terms, and exit plans. Attackers and coercive actors may exploit poor portability by making recovery slow, expensive, or operationally impossible, turning dependency into leverage.