A widely held misconception is that a privacy policy is the same as a privacy notice, and both terms can be used interchangeably. The draftsman inadvertently made this error, too, as the NDPR mentions privacy policy when a further reading reveals that a privacy notice is contemplated. This cannot be farther from the truth as the two concepts are distinct and serve different purposes.

While a privacy notice is a public statement to the consumer of how the organization processes the personal data it collects, privacy policy on the hand is an internal document that sets out in detail the framework for personal data management in an organization. More straightforward put, a privacy notice is externally focused, while a privacy policy is internal.

‍

Download

‍