The right to fair processing

A data subject has the right to know the lawful basis of how their personal data will be processed (along with other information required under the GDPR such as how long it will be stored), and must be provided with details of this in advance in a “concise, transparent, intelligible and easily accessible form, using clear and plain language”. This information is invariably presented in a Privacy Notice, usually provided when the data is collected. Articles 13 & 14 of the GDPR set out the minimum requirements for what needs to be included within a privacy notice. Further information is in Section 3 “Processing”.