What is a privacy statement?

A privacy statement explains how an organization collects, uses, shares, and retains personal information. It also tells people about relevant privacy rights and how to contact the organization.

The term is often used interchangeably with “privacy policy” or “privacy notice.” Some organizations use it for a short summary that links to a fuller explanation, while others use it as the main document describing their privacy practices. There is no universal legal distinction based solely on the title.

A privacy statement may also be provided in a specific context, such as alongside a form or at another point where personal information is collected. What matters is whether the information is accurate, sufficiently complete for the relevant processing, accessible, and provided at the appropriate time.

A general promise such as “We respect your privacy” does not by itself satisfy detailed privacy disclosure requirements. The statement should explain the actual data practices relevant to the people receiving it.