GDPR Article 13 — Information to be provided where personal data are collected from the data subject
Enforced by: ICO (UK) / National DPAs
Current as of May 25, 2018
Plain Language Summary
Privacy notice must disclose: who you are, why collecting, legal basis, who you share with, international transfers. Must be provided AT THE TIME of collection.
Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information: the identity and the contact details of the controller; the purposes of the processing and the legal basis for the processing; the recipients or categories of recipients of the personal data; where applicable, the fact that the controller intends to transfer personal data to a third country.