When must data subjects be informed about their rights regarding personal data?

Data subjects must be informed about their rights regarding personal data at the time of data collection or shortly thereafter to ensure they are aware of how their information is being used and what protections are available to them. This proactive approach supports the principles of transparency and accountability that underpin data privacy laws. By notifying individuals at the moment their data is collected, organizations can empower them to make informed choices about their personal data, including their consent for processing and their ability to exercise rights such as access, correction, and deletion.

This practice is essential for fostering trust between organizations and data subjects, as well as for compliance with privacy regulations that mandate such disclosures. The timely information allows individuals to understand their rights right from the outset of the data handling process, facilitating better engagement with their personal data and enhancing their ability to exercise control over it.