A Findable Privacy Notice

Every page of the organisation's website links to its privacy notice.

Criterion: A1
Level: Level 1
Domain: Finding and Making a Request
Reflects: Article 12(1)

Intent

The privacy notice is where a person finds out how to ask for their data. A link on every page means they can find it from wherever they land on the site.

How to test it

An assessor scores the criterion against a single response:

Score 2: A link to the privacy notice appears on every page of the website, forms included.
Score 1: The privacy notice is linked from most pages but missing from some, such as landing pages or checkout steps.
Score 0: The privacy notice is absent, or reachable only from one page the person must already know to visit.
Not applicable: The organisation has no website.

The law it reflects

This criterion reflects Article 12(1) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See A1 in context in the full standard.