You have a recorded procedure to make sure that individuals receive privacy information at the right time, unless an exemption applies.
Ways to meet our expectations:
- Individuals receive privacy information when their data is collected (eg when they fill in a form) or by observation (eg when using CCTV or people are tracked online).
- If you obtain personal data from a source other than the individual it relates to, you provide privacy information to individuals, no later than one month of obtaining the data.
Can you answer yes to the following questions?
- Do your staff understand when and how privacy information should be provided?