This issue focuses on the provision of information to data subjects. The provision of accurate and clear information is one of the data controller's main obligations. The GDPR aims to enhance the transparency of data processing for data subjects and therefore extends the categories of information to be provided to them. This information can be communicated by means of a privacy policy or other document. However, to ensure lawful data processing, information may need to be provided by means of a layered approach (e.g. a notice in addition to a privacy policy).

Please read more on this topic in our newsletter.