The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to data subjects in Articles 12, 13 and 14. These place an emphasis on making privacy notices understandable and accessible. Data controllers (you) are expected to take ‘appropriate measures’.
For more information, see this guidance
on the Information Commissioner's Office website.
Following the GDPR Action Plan
? Read the next guide
> Communicate the changes to your members and contacts