GDPR and financial advice: Privacy notices (Article 13)

One of the fundamental rights of the GDPR is the right to be informed. In practice, this means data subjects must be made aware of their rights by the firm and this is laid out in the form of a company's privacy notice. Thankfully, there is no guesswork for firms to undertake, since the GDPR lays out very clearly - in Articles 13 and 14 - exactly what firms must include in a GDPR-compliant privacy notice. Article 13 pertains to privacy policies where the data has been obtained directly from the data subject while Article 14 pertains to scenarios where the data has been indirectly obtaine...