In short
A privacy notice tells individuals what personal data an organization collects, why, who it is shared with, how long it is kept, what rights they have and whom to contact.
Key takeaways
- It should be clear and available when data is collected.
- Under purpose limitation, data shouldn't be used for purposes beyond those stated without a new legal basis.
- Notices must be updated when practices change.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Under a consent-based privacy model, an organization that wishes to use personal data for a new purpose not disclosed at collection should: