A Findable Privacy Notice

Every page of the organisation's website links to its privacy notice.

Criterion: A1
Level: Level 1
Domain: Finding and Making a Request
Reflects: Article 12(1)

Intent

The privacy notice is where a person learns how to exercise the right of access. A link on every page means they can find it wherever they land on the site, not only from the pages that happen to carry one.

How to test it

An assessor scores the criterion against a single response:

Score 2: A link to the privacy notice appears on every page of the website, forms included.
Score 1: The privacy notice is linked from most pages but missing from some, such as landing pages or checkout steps.
Score 0: The privacy notice is absent, or reachable only from one page the person must already know to visit.
Not applicable: The organisation has no website.

The law it reflects

This criterion reflects Article 12(1) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See A1 in context in the full standard.