{
  "id": "gdpr-transparency-items",
  "title": "Information a GDPR privacy notice must contain (Articles 13 and 14)",
  "description": "Each required item with its article in Art. 13 (data collected from the person) and Art. 14 (data from other sources).",
  "verified": "2026-10-19",
  "license": {
    "name": "CC BY 4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "attribution": "ClevSec (https://clevsec.one)",
  "disclaimer": "For informational purposes only; not legal advice. Check the cited sources and your national law.",
  "human_readable": "https://clevsec.one/blog/gdpr-privacy-policy-requirements/?ref=agent",
  "sources": [
    "https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng"
  ],
  "items": [
    {
      "item": "Identity and contact details of the controller and representative",
      "art13": "13(1)(a)",
      "art14": "14(1)(a)"
    },
    {
      "item": "Contact details of the data protection officer, where applicable",
      "art13": "13(1)(b)",
      "art14": "14(1)(b)"
    },
    {
      "item": "Purposes and legal basis",
      "art13": "13(1)(c)",
      "art14": "14(1)(c)"
    },
    {
      "item": "Legitimate interests pursued, where relied on",
      "art13": "13(1)(d)",
      "art14": "14(2)(b)"
    },
    {
      "item": "Categories of personal data",
      "art13": null,
      "art14": "14(1)(d)"
    },
    {
      "item": "Recipients or categories of recipients",
      "art13": "13(1)(e)",
      "art14": "14(1)(e)"
    },
    {
      "item": "Transfers outside the EEA and safeguards, and how to obtain a copy",
      "art13": "13(1)(f)",
      "art14": "14(1)(f)"
    },
    {
      "item": "Retention period or criteria",
      "art13": "13(2)(a)",
      "art14": "14(2)(a)"
    },
    {
      "item": "Rights of access, rectification, erasure, restriction, objection and portability",
      "art13": "13(2)(b)",
      "art14": "14(2)(c)"
    },
    {
      "item": "Right to withdraw consent, where relied on",
      "art13": "13(2)(c)",
      "art14": "14(2)(d)"
    },
    {
      "item": "Right to complain to a supervisory authority",
      "art13": "13(2)(d)",
      "art14": "14(2)(e)"
    },
    {
      "item": "Whether providing data is required and consequences of not providing it",
      "art13": "13(2)(e)",
      "art14": null
    },
    {
      "item": "Source of the data and whether publicly accessible",
      "art13": null,
      "art14": "14(2)(f)"
    },
    {
      "item": "Automated decision-making, including profiling, with meaningful information about the logic and consequences",
      "art13": "13(2)(f)",
      "art14": "14(2)(g)"
    }
  ]
}