What is the right to be informed in GDPR?

The right to be informed under Articles 13 & 14 of GDPR requires EU residents to be informed about collecting and processing their personal data. This right relates to the principle of transparency, a foundational concept in the GDPR. 

Organisations must provide individuals with concise, transparent, intelligible, and accessible information about the data being collected. They should provide information about:

• Purposes for processing personal data
• The categories of personal data collected
• Who the data will be shared with, including international transfers
• The retention periods for that personal data
• The rights available to them with respect to their data
• The right to withdraw consent

Businesses must provide information to individuals at the time they collect their data via privacy policy, cookie banner and privacy notices.