What is Privacy Notice / Privacy Policy?

A privacy notice (also commonly called a privacy policy) is a disclosure document required by virtually all data protection regulations that informs individuals about an organization's personal data processing practices. Under the GDPR (Articles 13 and 14), the notice must include the identity of the controller, purposes of processing, lawful basis, recipients of data, international transfer details, retention periods, data subject rights, right to complain, and whether data provision is a statutory or contractual requirement.

The CCPA/CPRA requires businesses to disclose categories of personal information collected, purposes of collection, categories of third parties with whom information is shared, and consumer rights. Privacy notices must be concise, transparent, intelligible, easily accessible, and written in clear and plain language. They should be provided at the time of data collection and updated whenever processing practices change significantly.

ComplyIQ helps organizations create and maintain jurisdiction-specific privacy notices that meet the requirements of all applicable regulations, track when notices need updating based on changes in processing activities, and maintain version history for accountability purposes.