Privacy notices
Generate and version Art. 13/14 GDPR notices from the records of processing.
Privacy notices go stale because they are maintained separately from the records of processing: the processing changes, the notice text does not. SimpleAct therefore generates the notice from the processing record – the information duties in Art. 13 and 14 essentially require exactly the details already recorded there.
At a glance
- Included from
- Professional
- Where in the app
- Data protection → Privacy notices
- Output
- A versioned notice text, retrievable as HTML and PDF
- Legal basis
- Art. 13, 14 GDPR
- API
- /api/v1/privacy-notices
How a notice comes about
- 1Complete the processing record – purpose, legal basis, data categories, recipients, retention, controller, supervisory authority.
- 2Generate the notice from it. You choose title and language; the draft is produced as Markdown text.
- 3Edit the text editorially. A generated draft is a complete basis but not a finished publication text – plain-language comprehensibility is its own requirement under Art. 12.
- 4Publish. The notice then gets a publication timestamp and is retrievable as HTML or PDF.
Status and versioning
| Status | Meaning |
|---|---|
| DRAFT | Draft, not yet published. |
| PUBLISHED | Published, with a timestamp. This is the version data subjects see. |
| ARCHIVED | Superseded but retained. Essential for proving which text was in force at which point in time. |
Why the version number matters more than it looks
Every notice carries a version number and a language. If a data subject asks years later what they were informed about at the time, the answer is not today’s text but the version in force back then. A notice that is only ever overwritten cannot answer that question.
So: when the processing changes materially, create a new version and archive the old one rather than editing the existing text.
The generator is not legal advice
The generated text follows the structure of Art. 13/14 and takes over your register data. It knows neither sector-specific additional duties nor your concrete website situation. Have the text reviewed before publishing – especially where special categories of data or automated decision-making are involved.
Part of the data subject response package
Privacy notices are automatically included in the response package for data subject requests – as Markdown and as PDF. Keeping them current saves a step on every access request.