GDPR Privacy Notice Template (Articles 13 and 14)

Articles 13 and 14 list the information you must provide to data subjects. Article 13 applies when you collect from the individual; Article 14 when data come from another source.

Related: GDPR hub · Lawful basis · Rights.

Layered notices work: short just-in-time notice + full policy link. Content must still cover the Article 13/14 elements.

Article 13 Core Elements (Template Outline)

Controller identity and contact details (+ DPO if any)
Purposes and lawful bases
Legitimate interests (when Art 6(1)(f) used)
Recipients or categories of recipients
Transfers and safeguards
Retention period or criteria
Rights (access, erasure, objection, etc.) and complaint to a SA
Whether provision is statutory/contractual requirement
Automated decision-making / profiling (if applicable)

Article 14 Extras

When data were not obtained from the data subject, also state categories of personal data and the source (public/private). Provide information within timescales in Art 14(3).

How CyberSilo Helps

Keep notice content aligned to live RoPA purposes in CSA
Track versions for accountability

Align Notices to Real Processing

Generate notice content from your RoPA so marketing pages stop drifting from operations.

Talk to CyberSilo GDPR Automation

Frequently Asked Questions

Do employees need a privacy notice?

Yes. Workforce processing still needs transparent information under Articles 13/14.

Is a cookie banner the privacy notice?

No. Banners address consent/ePrivacy UX; the privacy notice covers broader Art 13/14 content.

How often should notices be updated?

Whenever purposes, vendors, transfers, or rights processes change materially.

GDPR hub · RoPA · Cookies · CSA

GDPR Privacy Notice Template (Articles 13 and 14)

Article 13 Core Elements (Template Outline)

Article 14 Extras