The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to data subjects in Articles 12, 13 and 14. These are more detailed and specific than in the Data Protection Act and place an emphasis on making privacy notices more transparent, and accessible.
A privacy notice is supplied to any individual at the time they provide us with their personal data. The GDPR says that the information we provide to people about how we process their personal data must be:
- Concise, transparent, intelligible and easily accessible
- Written in clear and plain language
- Free of charge
The notice attached explains when and why we collect personal information about our members, how we use it and how we keep it secure and your rights in relation to it.