Article 13

Information to be provided where personal data are collected

​

At the time of first collecting personal data, an initial notification to the data subject is required. Some examples of additional requirements are contact details, DPO (if applicable), purpose and legal basis of use or transfer of data to another country.

​

Impact

​

The starting point of consent or preference management within your org. Core to compliance since a detailed data inventory and processes to support notifications is required.

​

Solutions

​

Manual: Map out standard or custom objects and identify any custom fields required. APEX or workflows to support timely exports or API integrations.

​

Automated: Consent Management

​

Next: Article 15

​

​