A company's privacy notice describes purposes and rights but never names the controller or provides required DPO contact details where a DPO is designated. What Art. 13/14 gap does that create?
Select an answer to reveal the explanation.
Short Explanation
A notice without "who we are" and how to reach the DPO (when you have one) is like a letter with no return address. GDPR expects controller identity and key contacts so people know whom they are dealing with.
Full Explanation
Articles 13 and 14 list required information, including the identity and contact details of the controller and, where applicable, of the data protection officer. Purposes and rights content alone does not satisfy those elements. Marketing handles, exam scheduling codes, and AI Act serials are not substitutes for the mandated identity and contact disclosures.