A Named Contact

The privacy notice names a data-protection contact and a direct way to reach them.

Criterion: A7
Level: Level 2
Domain: Finding and Making a Request
Reflects: Article 13(1)(b)

Intent

A data-protection contact gives the person somewhere to take a question or a problem, instead of a general enquiries address where a request can sit unread. A Data Protection Officer or a data-protection team is enough: the criterion asks who deals with this, not for an individual's name.

How to test it

An assessor scores the criterion against a single response:

Score 2: The privacy notice names a data-protection contact, and a way to reach them that does not go through general enquiries.
Score 1: The notice names a data-protection contact but routes the person through general enquiries, or gives an address without saying whose it is.
Score 0: The notice names no data-protection contact.

The law it reflects

This criterion reflects Article 13(1)(b) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See A7 in context in the full standard.