The General Data Protection Regulation UK Spelling - Page 10

Communication Communication In order to ensure compliance with the communication obligations of the GDPR, there are two key areas for consideration. Rights to access Under the GDPR, individuals will have the right to obtain: • confirmation that their data is being processed • access to their personal data and other supplementary information In addition, if you are transferring personal data to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. Right to be informed The information you supply about the processing of personal data must be: • concise, transparent, intelligible, easily accessible • written in clear and plain language • and free of charge Organisations must inform individuals at the time of obtaining data directly from them or within a reasonable period (a month) in the case of data obtained from other sources; or if the data are used to communicate with the individual, at the latest, when the first communication takes place. invenias powering your search for talent