Do I need a Privacy Notice and what should be in it?

QUESTION

Do I need a Privacy Notice and what should be in it?

ANSWER

Simple answer: YES

More detail:  There is a lot of guidance available on-line about what should be in a Privacy Notice. However it is important to tailor this to your needs. In some cases the Privacy Notice may be part of a contract or membership agreement.

Decide what to include by working out:

·        what personal information you hold;

·        what you do with it and what you are planning to do with it;

·        what you actually need;

·        whether you are collecting the information you need;

·        whether you are creating new personal information; and

·        whether there are multiple data controllers.

Also consider including:

·        the links between different types of data you collect and the purposes that you use each type of data for;

·        the consequences of not providing information;

·        what you are doing to ensure the security of personal information;

·        information about people’s right of access to their data; and

·        what you will not do with their data.

Privacy notices under the EU General Data Protection Regulation

https://ico.org.uk/for-organisations/guide-to-data-protection/privacy-notices-transparency-and-control/your-privacy-notice-checklist/

MORE DETAIL

If you go to https://gdprjersey.blogspot.com/ you’ll see a lot of Q&As, and down the right column lots of links to advice from Jersey Data Protection Association, Jersey Information Commission Office, as well as Jersey Community Partnership and the Association of Jersey Charities. We are also organising a number of presentations and workshops.