A good privacy policy should:
Almost all data protection and privacy laws require you to explain, concisely and using plain language (no legal speak), why you collect this data, who you share it with and why and when you delete it. Transparency and choice are the foundations of a good Privacy Statement (some list it as Privacy Policy on their website).
01
Identity and contact details of the Privacy lead, including 2 ways to easily reach that person.
02
Efficiently manage third-party risks with standardized, shareable assessments, centralizing all vendor information within a single platform to streamline due diligence processes.
03
How the organization uses specific fields of data and their purposes (this includes any processing activity, not only through third-party services like newsletters, customer information, invoice data, and social media)
04
Legal basis of the processing and the reasoning behind it.
05
Information about special categories of personal data (like handling of children’s data and sensitive data)
06
Recipients of data
07
Information about data transfers to third countries and the suitable safeguards
08
Period for which data will be retained
09
How to make use of data subject rights
10
Option to change or withdraw consent
11
Option to complain or appeal to supervisory authorities
12
Existence of automated decision-making and its uses
To explore how SafeGuard Privacy can elevate your compliance strategy, consider scheduling a demo with their team.