The right to be informed encompasses your obligation to provide ‘fair processing information’, typically through a privacy notice. It emphasises the need for transparency over how you use personal data.
What information must be supplied?
The GDPR sets out the information that you should supply and when individuals should be informed.
The information you supply is determined by whether or not you obtained the personal data directly from individuals. See the table below for further information on this.
Much of the information you should supply is consistent with your current obligations under the DPA, but there is some further information you are explicitly required to provide.
The information you supply about the processing of personal data must be: