What is a Privacy Policy?
A privacy policy is a legal document provided by NARIS GRC that explains the types of personal data collected from customers, for what purpose, and how data is processed.
Why and how should I assess this?
The primary purpose of a privacy policy is to provide information to customers and website visitors about what happens with their data and why it is collected. Moreover, having a privacy policy is required by law.
Any privacy policy should include:
-
The information collected by the company from its customers and users
-
Purposes for which the data is processed
-
The legal basis for the processing
-
Whether data is shared with third parties
-
Where and for how long data is stored
-
Description of the data subject rights
-
Notification about any changes made to the privacy policy