Privacy notice guide

Overview

The UK General Data Protection Regulation (GDPR) requires data controllers to provide certain information to people whose personal data they hold and use. A privacy notice is one way of providing this information. 

A privacy notice should identify who the data controller is and give contact details for its Data Protection Officer. It should also explain the purposes for which personal data is collected and used, how the data is used and disclosed, how long it is kept, and the controller’s legal basis for processing.

A privacy notice must be: 

• concise, transparent, intelligible and easily accessible
• written in clear and plain language, particularly if addressed to a child
• free of charge