What is a Privacy Policy?
A privacy policy is a document that describes an organizations privacy practices. It is an internal document, intended for use within the company. Privacy policies inform employees about how Personal Information must be handled.
When an organization changes its privacy policy it should first announce the change to employees, then announce the change to current and former customers. Before making material retroactive changes to privacy representations, it should obtain express affirmative consent (opt-in). A material change would include sharing information with third parties after committing not to share at the time of data collection.
See Privacy Notification for external document.