Guide to the General Data Protection Regulation (GDPR)
...collected directly from data subjects, data controllers must provide a privacy notice at the time of collection. When personal data is not obtained directly from data subjects, data controllers must...


