What matters
Controllers should understand when they have to disclose individual recipients of data, extra requirements for complex technical data, and explanations of automated decision-making, to know when they can rely on a privacy notice alone.
What matters next
Organizations can get ahead by updating privacy notices and processing records,