A controller publishes a short first-layer privacy summary with clear links to deeper detail on purposes, rights, and transfers. How does GDPR practice generally view that design?
Select an answer to reveal the explanation.
Short Explanation
Layered notices are the "headline then details" model. A clear short overview up front with links to the deep dive helps people actually understand, as long as the essentials are not hidden or missing.
Full Explanation
Regulators and WP29/EDPB guidance have long endorsed layered privacy notices: a concise overview of key points with accessible links to more detailed information. Layering aids intelligibility under Article 12; it does not waive the duty to provide required Art. 13/14 content, including lawful bases, and it is not limited to special-category processing.