Notice and Privacy Policy

There is no required or recognised wording for collecting personal information.

However, the UK national data protection authority, the Information Commissioner’s Office (ICO), has produced some useful guidance on suitable wording for collecting personal information in its Privacy Policies Code of Practice (2010) at file:///C:/data%20protection/privacy_notices_cop.pdf

The data subject must be notified of the following:

  • the identity of the data controller;
  • if the data controller has nominated a representative for the purposes of the Data Protection Act and the identity of that representative;
  • the purpose or purposes for which the personal information is intended to be processed; (including whether data are going to be passed on to third parties)
  • any further information which is necessary, having regard to the specific circumstances in which the data are or are to be processed, to enable processing in respect of the data subject to be fair (for example, if the personal information is going to be transferred outside the European Economic Area (EEA).