Transparent Communication with Data Subjects, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(1).
Assessment Step
1
Transparent Communication with Data Subjects (TransparentCommunicationwithDataSubjects)
Does the entity take appropriate measures to provide data subjects with all information referred to in Articles 13 and 14 and all communications under Articles 15 to 22 and 34 in a concise, transparent, intelligible and easily accessible form, using clear and plain language?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
Transparent Communication with Data Subjects
The data controller must take appropriate measures to provide data subjects with all information referred to in Articles 13 and 14 and all communications under Articles 15 to 22 and 34 in a concise, transparent, intelligible and easily accessible form, using clear and plain language.
Citation
GDPR
Art. 12(1), Recital 58, 59
|