Transparency

The GDPR is designed to ensure that organisations are transparent in their processing activities and when they communicate with data subjects.

Transparency is now embedded as a key principle of the GDPR. The GDPR particularly emphasises the need for transparency in privacy notices, and also when communicating with data subjects in relation to their rights or data breaches. Such communications should be in a concise, transparent, intelligible and easily accessible form, using clear and plain language. The requirements are even stronger if the information is addressed to a child. 

The GDPR also emphasises the need for organisations to make data subjects aware of the “risks, rules, safeguards and rights in relation to the processing of personal data and how to exercise their rights in relation to such processing”.

Practical steps to take now

Consider how the transparency requirement will affect your privacy notices:

  1. Are they easily accessible and not buried in longer terms and conditions? 
  2. If the notice is “layered” e.g. via “click through” headings, is the most intrusive and surprising processing apparent from the first layer? Is it clear from the headings where the rest of the information can be reached?
  3. Is the language clear and concise? Are the fonts and colours easily legible?
  4. Will the notices be intelligible to the likely audience (e.g. consider children, people with disabilities)? 
  5. Do they make clear what the most important risks or most intrusive processing activities are?
  6. Are the notices appropriate to the type of activity or technology? A notice that only appears on a website may not be appropriate for CCTV monitoring for example.
  7. Will the notices be reviewed at appropriate intervals? 
  8. How will data subjects be notified of changes so that they can exercise their rights before the change comes into effect?
  9. Consider also how the transparency obligations will affect your other communications with data subjects. 
  10. Download our checklist and check that you are providing the right information about what personal data you process, why and how.

Main contacts

Contact one of our lawyers to discuss your GDPR concerns.

  • Gary Attle

    Gary Attle

    Partner

    • +(44)(0)1223 222394
    • Email Gary

      Contact Gary Attle

      * = required

       
       
         
       

      Mills & Reeve will use the information you provide in this form in accordance with our privacy policy. We may from time to time send you general updates by email or post that we think you will find of interest. This includes notification of upcoming event and updates or alerts containing relevant legal news. You can update your preferences at any time and will be able to easily unsubscribe from anything that you do not wish to receive.

      Thank you

      Thank you for your enquiry. We will be in touch shortly.

    • Cambridge
  • Richard Sykes

    Richard Sykes

    Partner

    • +(44)(0)121 456 8436
    • Email Richard

      Contact Richard Sykes

      * = required

       
       
         
       

      Mills & Reeve will use the information you provide in this form in accordance with our privacy policy. We may from time to time send you general updates by email or post that we think you will find of interest. This includes notification of upcoming event and updates or alerts containing relevant legal news. You can update your preferences at any time and will be able to easily unsubscribe from anything that you do not wish to receive.

      Thank you

      Thank you for your enquiry. We will be in touch shortly.

    • Birmingham
  • Peter Wainman

    Peter Wainman

    Partner

    • +(44)(0)1223 222408
    • Email Peter

      Contact Peter Wainman

      * = required

       
       
         
       

      Mills & Reeve will use the information you provide in this form in accordance with our privacy policy. We may from time to time send you general updates by email or post that we think you will find of interest. This includes notification of upcoming event and updates or alerts containing relevant legal news. You can update your preferences at any time and will be able to easily unsubscribe from anything that you do not wish to receive.

      Thank you

      Thank you for your enquiry. We will be in touch shortly.

    • Cambridge
  • Paul Knight

    Paul Knight

    Partner

    • +(44)(0)161 234 8702
    • Email Paul

      Contact Paul Knight

      * = required

       
       
         
       

      Mills & Reeve will use the information you provide in this form in accordance with our privacy policy. We may from time to time send you general updates by email or post that we think you will find of interest. This includes notification of upcoming event and updates or alerts containing relevant legal news. You can update your preferences at any time and will be able to easily unsubscribe from anything that you do not wish to receive.

      Thank you

      Thank you for your enquiry. We will be in touch shortly.

    • Manchester
Mills & Reeve Sites navigation
A tabbed collection of Mills & Reeve sites.
Sites
My Mills & Reeve navigation
Subscribe to, or manage your My Mills & Reeve account.
My M&R

Visitors

Register for My M&R to stay up-to-date with legal news and events, create brochures and bookmark pages.

Existing clients

Log in to your client extranet for free matter information, know-how and documents.

Staff

Mills & Reeve system for employees.