What is the right to be informed in GDPR?

The right to be informed under Articles 13 & 14 of GDPR requires EU residents to be informed about collecting and processing their personal data. This right relates to the principle of transparency, a foundational concept in the GDPR. 

Organisations must provide individuals with concise, transparent, intelligible, and accessible information about the data being collected. They should provide information about:

  • Purposes for processing personal data
  • The categories of personal data collected
  • Who the data will be shared with, including international transfers
  • The retention periods for that personal data
  • The rights available to them with respect to their data
  • The right to withdraw consent

Businesses must provide information to individuals at the time they collect their data via privacy policy, cookie banner and privacy notices.