GDPR - privacy notice
Under data protection legislation certain information must be supplied to individuals regarding the processing of their personal data. All this information can be put in a privacy notice.
thought process
When putting your privacy notice together, go through the following thought process:
- what information is being collected?
- who is collecting it?
- how is it collected?
- why is it being collected?
- how will it be used?
- who will it be shared with?
- what will be the effect of this on the individuals concerned?
- is the intended use likely to cause individuals to object or complain?
- how can they complain and to whom?
Starting point
The starting point of your privacy notice should be to tell people:
- who you are
- what you are going to do with their information; and
- who it will be shared with.