GDPR is not a checkbox

1–2 minutes

By our senior Privacy Advisor Jonah Buts

In today’s data-driven world, organisations collect personal data from customers, employees, suppliers, etc. — every single day. This data is valuable, and with that value comes responsibility.

👉 Collecting, securing and managing personal data properly is not only a legal obligation — it’s also essential for your reputation.

Yet communication about privacy often remains vague, legal and not very accessible. And that is a missed opportunity.

By clearly and transparently explaining what data you collect, why you collect it, and how you protect it, you strengthen data subjects’ trust in your organisation..

4 practical tips to make your communication more human, clear and effective:

1. Translate legal into plain language

Explain what you do with data in simple, concrete terms. Avoid vague statements like “We may use your data for marketing purposes” or “We collect your data to comply with legal obligations, where applicable.”

2. Be visible at the right moments

Always inform individuals when you’re collecting their data. This can be done through a privacy notice, but ideally also with short, contextual ‘just-in-time’ messages. Example: “We ask for your phone number to keep you updated about your delivery — not to send direct marketing.”

3. Make it visual and interactive

Long texts deter users. Use icons, visual cues, tables of contents, or interactive formats to make your information clear and accessible.

Looking for inspiration? Then be sure to consult the website made available by the French regulatory authority (CNIL): design.cnil.fr

4. Be transparent — even when things go wrong

If a data breach or mistake occurs, communicate openly. Making mistakes is human – how you deal with it makes all the difference.

Clear privacy communication isn’t a burden — it’s a service to the data subject.