GDPR: Transparency and privacy notices
Perhaps the most common privacy practice followed globally is the familiar “notice and choice” paradigm, which typically involves a statement on an organization’s website explaining its data processing and security practices and the opportunity (in theory) for consumers to avoid those practices.
“Choice” has involved, at least, the opportunity not to share data with the organization by not doing business there. Notice is sometimes accompanied by an opt-in option, though opt-outs are also common.
Source: Top 10 Operational Responses to the GDPR â Part 6: Transparency and privacy notices