The Law recognises how important it is for individuals to be provided with clear, relevant and accurate information about what is happening to their data. When organisations collect data (whether that is online or offline, directly or indirectly) there must be absolute clarity about how that data will be used.
These can be called data processing notices, privacy notices, data protection notices or anything that clearly indicates that it is information relating to the way in which personal data is used.
The Law sets out a comprehensive list of information to be given so you must ensure that, at all personal data collection points, this information is easily accessible.
You can view the ODPA's data processing notice here.
Remember, all organisations will be collecting and processing personal data for different reasons and in different ways. Templates can be a useful starting point but you will need to modify them to reflect your specific data processing activities.
Please note: The information required to be given to data subjects under the Law Enforcement Ordinance differs to that required by the Law. When processing personal data for a Law Enforcement purpose under the Law Enforcement Ordinance please consult section 12 of the Ordinance.