Privacy Notices & Transparency
People have a right to know how their data is used. Based on the RoPA, this workshop identifies every point where data is collected and prepares clear privacy notices for each group of data subjects.
Workshop 4 video
Walkthrough of the workshop and its tasks — coming soon
What ResGuard provides
- Privacy notice generated from your RoPA in one click, with every placeholder still to complete highlighted
- Ready-made privacy notice templates for Law 21.719, in English and Spanish
- Your own Request Portal linked in the notice automatically
- Employee notices distributed and acknowledged through the Policy Framework
Workshop tasks
-
1. Identify collection points
List where data is collected: website, forms, cookies, apps, contracts, job applications, intranet, video surveillance, visitor logs and events.
In ResGuard: Data Inventory -
2. Define notice content
Include the controller's identity and contact details, purposes, recipients, transfers, retention periods and how to exercise rights. Most of it comes straight from the RoPA. A draft with the mandatory content can be generated from the RoPA with Generate Privacy Notice.
In ResGuard: Data Inventory → Generate Privacy Notice -
3. Draft & approve notices
Write one notice per group of data subjects in plain language, using a layered approach: a short summary at the collection point and the full notice behind a link. Start from the generated notice, complete the highlighted placeholders and approve it in the Policy Framework.
In ResGuard: Data Inventory → Generate Privacy Notice, Policy Framework -
4. Publish & keep current
Publish each notice at its collection point, keep previous versions and update notices whenever a RoPA activity changes. Generate the notice again when the RoPA changes and compare it with the published version.
In ResGuard: Policy Framework -
5. Workshop review & close-out
Review the published notices with the DPO, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind in Chile
- The controller must keep its processing policy permanently accessible: identity and contact details, purposes, legal basis, recipients, transfers, retention periods and how to exercise rights.
- Consent can be withdrawn at any time without retroactive effect; the notice must explain how.
- For video surveillance, put up visible signs at the entrances of monitored areas.
Expected result
- Complete inventory of collection points
- Notices for clients, website users, employees, applicants and vendors
- Notices approved in the Policy Framework and published
- Update process linked to RoPA changes
ResGuard modules: Policy Framework, Data Inventory (RoPA)