# Standards and Regulatory References

## Primary Legislation

### GDPR (Regulation (EU) 2016/679)
- **Article 12** — Transparent information, communication and modalities for the exercise of data subject rights
- **Article 13** — Information to be provided where personal data are collected from the data subject
- **Article 14** — Information to be provided where personal data have not been obtained from the data subject
- **Articles 15-22** — Data subject rights (access, rectification, erasure, restriction, portability, object, automated decisions)
- **Article 34** — Communication of a personal data breach to the data subject
- **Recital 39** — Transparency principle: natural persons should be made aware of risks, rules, safeguards and rights
- **Recital 58** — Transparency: information may be provided electronically, including through a website
- **Recital 59** — Modalities for facilitating the exercise of data subject rights

### UK Data Protection Act 2018
- **Section 12** — Transparency requirements supplementing Art. 12

## Regulatory Guidance

### European Data Protection Board (EDPB) / Article 29 Working Party
- **Guidelines on Transparency under Regulation 2016/679 (WP260 rev.01)** (adopted 11 April 2018): Definitive guidance on implementing Art. 12 transparency requirements, including the layered notice approach, plain language standards, and communication modalities.
- **Guidelines 01/2022 on data subject rights — Right of access** (adopted 28 March 2023): Provides guidance on Art. 12 communication requirements in the specific context of access requests.

### Information Commissioner's Office (ICO) — United Kingdom
- **Right to be informed guidance** (updated 2024): Practical guidance on meeting Art. 12-14 transparency obligations under UK GDPR.
- **Privacy notices code of practice**: Framework for creating effective privacy notices that meet the transparency standard.

## Readability Standards

### Flesch-Kincaid Readability Tests
- **Flesch Reading Ease**: Target score of 60-70 (easily understood by 13-15 year olds) for general public privacy notices.
- **Flesch-Kincaid Grade Level**: Target grade 8 or below for general public notices.

### Plain English Campaign Guidelines
- Crystal Mark standard for clear, concise public communication.