Notifying individuals what you will do with their data

One of the requirements of the first principle of GDPR is that personal data should be processed “fairly and in a transparent manner in relation to individuals”. In practice, this requires you to:

  • be open and honest about your identity
  • tell people clearly how you intend to use any personal data you collect about them (unless it is obvious)
  • handle their personal data only in ways they would reasonably expect
  • above all, not use their information in ways that unjustifiably have a negative effect on them