Document background
The General Privacy Notice is a mandatory document required under both EU and German data protection law, serving as a primary means of fulfilling transparency obligations under Articles 13 and 14 of the GDPR and corresponding BDSG requirements. This document should be implemented by any organization processing personal data of individuals in Germany, whether they are customers, employees, or other data subjects. The notice must be provided at the time of data collection and should be easily accessible, written in clear, plain language, and contain all required information about data processing activities, data subject rights, and organizational practices. It needs regular reviews and updates to reflect any changes in data processing activities or legal requirements, particularly considering the strict enforcement approach of German Data Protection Authorities.
