What means the Right to be Informed?
Individual has the right to be informed about how and why their personal data is being processed. Grounds for processing are usually explained when asking for consent from the individual. The individual has a right to be informed after giving their consent as well, meaning that the company should be able to provide the individual with concise, intelligible, easily accessible, free of charge and clearly written information about the processing.
Right to be informed – what information has to be provided to the data subject?
- The name and contact details of our organisation.
- The name and contact details of our representative or data protection officer (if applicable).
- The purposes of the processing.
- The lawful basis for the processing.
- The categories of personal data obtained (if the personal data is not obtained directly from the individual).
- The recipients or categories of recipients of the personal data.
- The details of transfers of personal data to any third countries or international organisations (if applicable).
- The retention periods for the personal data.
- The rights available to individuals in respect of the processing.
- The right to withdraw consent (if consent is used as a legal basis).
- The right to lodge a complaint with a supervisory authority.
- The source of the personal data (if the personal data is not obtained directly from the individual).
- The details of whether individuals are under a statutory or contractual obligation to provide personal data (if applicable, and if the personal data is collected from the individual it relates to).
- The details of the existence of automated decision-making, including profiling (if applicable).
Read more in EDPB guidelines to Right of access (aka Right to be informed)
