GDPR Series: Part 9 - Information to be Provided to Data Subjects
This series provides more detailed insight into the General Data Protection Regulation, which was published on 4 May 2016 and must be complied with by 25 May 2018.
This issue focuses on the provision of information to data subjects. The provision of accurate and clear information is one of the data controller's main obligations. The GDPR aims to enhance the transparency of data processing for data subjects and therefore extends the categories of information to be provided to them. This information can be communicated by means of a privacy policy or other document. However, to ensure lawful data processing, information may need to be provided by means of a layered approach (e.g. a notice in addition to a privacy policy).
Please read more on this topic in our newsletter.