Privacy notice

Telling people what you do with their data. Required, and usually copied from somewhere.

What it means

A privacy notice explains what personal data you collect, why, on what lawful basis, who you share it with, how long you keep it and what rights people have.

Why it matters

Transparency is a legal requirement and the notice is the primary means of meeting it. It is also the first thing the ICO looks at.

What it looks like in practice

It must be concise, transparent, intelligible and easily accessible, and written in clear plain language — particularly where children are involved.\n\nDifferent notices may be needed for customers, staff and job applicants.

What to watch out for

A generic notice that does not describe what you actually do. It is worse than none, because it is evidence you told people something untrue.

Where to get proper advice

The ICO's privacy notice guidance and its template for small organisations, both free.