Spotify, Ever the Fans of Openness
FWIW you can download all your playlists in JSON format with the GDPR export tool in the privacy settings of your account [1]. It take &quot;up to 30 days&quot; for them to email you the ZIP-file. In the cased of the linked blog post, it took them 3 days, which is probably only some arbitrary amount of time to discourage you from using it effectively. The GDPR only states &quot;without undue delay&quot;.<p>Under article 20 of the GDPR (&quot;Right to data portability&quot;), subsection 2 states that &quot;[i]n exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible&quot; [2].<p>Seeing how this has been previously been done, Spotify has already shown it to be technically possible. Enough users should be able to pressure Spotify to re-enable the API.<p>I just sent a mail to privacy@spotify.com:<p><pre><code>  L.S.
  
  I&#x27;m a paying user of the Spotify music service. I want to exercise my rights under the GDPR article 20 subsection 2 to data portability to transmit my data, namely playlist information, directly to another controller, namely SongShift.
  
  It is clear that this is technically possible, as it has been possible in the past. However, Spotify has chosen to force SongShift to disable its API. This is in violation of my rights under the GDPR. I demand that you re-enable this API to allow me to exercise my rights under the GDPR.
  
  I expect a notification of receipt within 5 days. I expect a full answer within 14 days. In case of no reply, or no satisfactory reply, I will enter a complaint (verzoekschriftprocedure) at the Dutch civil court (Rechtbank Midden-Nederland).
</code></pre>
[1] <a href="https:&#x2F;&#x2F;observablehq.com&#x2F;@a-lexwein&#x2F;what-i-got-when-i-requested-data-from-spotify" rel="nofollow">https:&#x2F;&#x2F;observablehq.com&#x2F;@a-lexwein&#x2F;what-i-got-when-i-reques...</a><p>[2] <a href="https:&#x2F;&#x2F;gdpr-info.eu&#x2F;art-20-gdpr&#x2F;" rel="nofollow">https:&#x2F;&#x2F;gdpr-info.eu&#x2F;art-20-gdpr&#x2F;</a>