A privacy policy is a document that explains to community members, clients, or partners what personal data your organization collects, why you collect it, how you store and protect it, who you share it with, and how people can access or correct their own information. Privacy policies are legally required in most jurisdictions for organizations that hold personal data. In the age of AI, they also need to address what happens when AI tools interact with the data you hold.
NOTE: Standard privacy policies typically focus on personal information; however, to align with Indigenous data sovereignty, ensure your policy also addresses collective data and rights.