Fairness and transparency

The GDPR's aim is to put individuals "in control of their own personal data" and knowing what their personal data is to be used for is fundamental to that aim. This principle links with the “specified, explicit and legitimate purposes” of the purpose limitation principle.

Controllers must take appropriate measures to give data subjects certain information to ensure the fairness and transparency in the use of their personal data.

That information must be provided to the data subject free of charge in "a concise, transparent, intelligible and easily accessible form, using clear and plain language".   It can be communicated in hard copy or electronically, and standardised icons can be used to give a "meaningful overview of the intended processing" in an "easily visible, intelligible and clearly legible way". In respect of children, the information must be provided in a child-friendly manner.

Information about the transparency requirements can be found in the "Closer Look" guide below.