Rule 3Notice given by Data Fiduciary to Data Principal

The notice given by the Data Fiduciary to the Data Principal shall—

(a) be presented and be understandable independently of any other information that has been, is or may be made available by such Data Fiduciary;

(b) give, in clear and plain language, a fair account of the details necessary to enable the Data Principal to give specific and informed consent for the processing of her personal data, which shall include, at the minimum, —

(i) an itemised description of such personal data; and

(ii) the specified purpose or purposes of, and specific description of the goods or services to be provided or uses to be enabled by, such processing; and

(c) give, the particular communication link for accessing the website or app, or both, of such Data Fiduciary, and a description of other means, if any, using which such Data Principal may—

(i) withdraw her consent, with the ease of doing so being comparable to that with which such consent was given;

(ii) exercise her rights under the Act; and

(iii) make a complaint to the Board.