Legal Services


GDPR - Privacy notices

Privacy notices or Fair Processing Notices’ (FPNs) set out the information you need to provide individuals under the GDPR to meet the 'lawfulness, fairness and transparency’ principle. The format they will need to take depends on whether the information is gained from consent or third parties, or a combination of the two, and whether there is automated profiling or decision making involved. 

FPNs must contain significantly more information than they currently do under the DPA.

A full list of information that should be contained in FPNs can be found in Article 13 and 14 of the GDPR.

What information must be provided?

In order to be compliant, it’s important that the information is presented, and written in plain English or an easily understandable language and avoid legalistic terminology or jargon.

The ICO has published a number of guides on privacy notices to ensure compliance with the new Regulation. These are available via the following routes: