Publish and maintain privacy notices
Information governance, information security and data protection officer: Publish and maintain privacy notices. Starts when: A service collects personal data. Steps: Draft the notice; Publish at the point of collection; Review on change. Done when: Every collection point links to the current notice. Rules that apply: UK GDPR Articles 13 and 14.