Providing Direct Collection Information

Overview

GDPR Article 13 requires controllers to provide specific information to data subjects at the time personal data is collected directly from them. This information must be provided at the point of collection, not afterwards. This skill provides the complete checklist of required elements, guidance on layered notice design, and templates for common collection scenarios.

Legal Foundation

GDPR Article 13 — Information to Be Provided Where Personal Data Are Collected from the Data Subject

Art. 13(1) — First Layer (Mandatory at Point of Collection)

Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information: