Document informing individuals about how their personal data will be collected, used, and protected.
A privacy notice (or privacy policy) is a transparency document explaining to data subjects what personal data you collect, why you process it, who you share it with, how long you keep it, and what rights they have. GDPR requires privacy notices to be clear, accessible, and provided at the point of data collection. Privacy notices should cover all processing activities and be updated when practices change.
Why It Matters
The DSC Perspective:
Privacy notices are mandatory and must accurately reflect your processing. Keep them current and ensure people actually see them at appropriate points. Inaccurate notices are compliance failures.