Definitions #
A document that tells people how their personal information will be collected, used, stored, and shared by a company or organization.
Technical A formal disclosure required under data protection laws such as GDPR or CCPA, detailing the legal basis, purposes, retention periods, and third-party recipients of personal data processing.
Example The company issued a privacy notice to job applicants explaining how their application data would be processed and retained.
Etymology #
From 'privacy' (from Latin 'privatus', meaning 'set apart') and 'notice' (from Latin 'notitia', meaning 'a being known'), combining to indicate a formal communication about personal data handling.
Collocations #
- clear and conspicuous privacy notice a notice that is easily visible and understandable to users
- privacy notice and consent the document that explains data practices and the user's agreement to them
Real Business Examples #
- The mobile app must provide a privacy notice that discloses the categories of personal data collected and the purposes of processing.
- Under GDPR, a privacy notice must be provided at the time personal data is collected, unless it has already been given.
Register & Variants #
- Register: formal
- BrE/AmE: Global use; 'privacy policy' more common in US, 'privacy notice' standard in EU and international practice
Synonyms & Antonyms #
- Synonyms: data protection notice, privacy disclosure
Common Errors #
- Using 'privacy notice' and 'privacy policy' interchangeably without recognizing the legal distinction. A 'privacy policy' is a broader document that may include internal practices, while a 'privacy notice' specifically addresses data subjects and their rights; use the term that fits the regulatory context.
Confusable Terms #
- privacy policy vs Privacy notice
- A privacy policy is a more general document that outlines an organization's handling of data, whereas a privacy notice is often a specific disclosure to individuals as required by law.
Frequently Asked Questions
Is a privacy notice legally required for all companies??
In jurisdictions like the EU (GDPR) and California (CCPA), if you collect personal data, you likely must provide a privacy notice; the exact requirements depend on your scope and location.
Can I use a privacy notice as a contract??
No, a privacy notice is a disclosure document, not a contract; it informs users how data is processed, but consent is usually obtained in a separate manner.
What must a privacy notice contain under GDPR??
It must include the identity of the controller, contact details, purposes and legal basis for processing, recipients, data transfer information, retention periods, and individuals' rights.