Research Governance

Privacy Notice

A privacy notice is user-facing information that explains how personal data is collected, used, shared, stored, protected, and controlled.

Concept facts

A privacy notice is user-facing information that explains how personal data is collected, used, shared, stored, protected, and controlled.

Also known as
Privacy information, privacy statement, data protection notice, privacy disclosure.
Used in
User research, consent flows, public-service portals, digital products, account registration, analytics, health services, education platforms, financial services, and participant recruitment.
Interpret with
Research ethics, informed consent, plain language, policy language, content design, data quality, research operations, and accessibility.

Plain-language explanation

A privacy notice tells people what happens to their personal data. It should explain what data is collected, why it is collected, who receives it, how long it is kept, what rights people have, and how they can ask questions or exercise control.

Why it matters

Digital services often collect sensitive information. If privacy information is unclear, hidden, or too complex, people cannot make informed decisions. Privacy notices also help organizations maintain accountability and reduce misuse of data.

Use contexts

  • collecting personal data in digital products or services
  • conducting user research with participants
  • recording interviews, usability tests, or support sessions
  • collecting analytics, session data, or behavioural events
  • asking for consent or explaining lawful processing
  • launching public-service, health, finance, education, or civic-tech systems

Application guidance

Use clear and plain language. Provide privacy information at the right time. Explain purpose, data categories, retention, sharing, rights, and contact routes. Layer information where appropriate and make privacy notices accessible.

Practical example

A research team plans usability testing for a health appointment platform. Participants will share screen recordings, voice comments, and appointment-related scenarios. The privacy notice explains what will be recorded, how the data will be used, who can access it, how long it will be stored, and how participants can withdraw where applicable. The UX consequence is user trust, ethical research participation, compliance risk reduction, and clearer expectations around sensitive health-related information.

Interpretive boundaries

A privacy notice is not the same as consent. Some processing may rely on consent, while other processing may use another lawful basis depending on jurisdiction and context. Privacy notices must be accurate and should not shift all responsibility to the user.

Applied at Userhub

Userhub uses privacy notice thinking when planning user research, reviewing consent flows, evaluating forms, and assessing digital services that collect personal or sensitive data. In UX Lab work, privacy notice review helps connect trust, research ethics, content clarity, accessibility, and data governance.

See Userhub UX Lab for applied UX research and evaluation context.

Sources and references

Information Commissioner’s Office. (n.d.). Right to be informed. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-be-informed/

Information Commissioner’s Office. (n.d.). Principle (a): Lawfulness, fairness and transparency. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/lawfulness-fairness-and-transparency/

European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council. EUR-Lex. https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng

ISO/IEC. (2020). ISO/IEC 29184:2020 Information technology — Online privacy notices and consent. International Organization for Standardization. https://www.iso.org/standard/70331.html

Schaub, F., Balebako, R., Durity, A. L., & Cranor, L. F. (2015). A design space for effective privacy notices. Eleventh Symposium on Usable Privacy and Security, 1–17. USENIX Association. https://www.usenix.org/conference/soups2015/proceedings/presentation/schaub

Cite this entry

APA

Userhub. (2026). Privacy Notice. UX Reference. https://userhub.com.bd/reference/privacy-notice/