Legal
Privacy Notice
A document informing individuals about how their personal data is collected, used, and protected — often used interchangeably with privacy policy.
A privacy notice (often called a privacy policy) is a statement that discloses how an organisation collects, uses, shares, and protects personal data.
Required Content Under GDPR
- Identity and contact details of the data controller and DPO
- The purposes and legal basis for processing
- Recipients or categories of recipients
- Details of international transfers
- Retention periods
- Data subject rights
- Right to lodge a complaint with a supervisory authority
- Whether data provision is a statutory or contractual requirement
- The existence of automated decision-making, including profiling
Notice vs Policy
While often used interchangeably, a privacy notice is the external-facing document for data subjects, while a privacy policy can also refer to internal organisational policies.
Legal Reference
GDPR Articles 13 and 14.