CIPM: Certified Information Privacy Manager

A controller must provide the purpose or purposes for which personal data will be processed as part of the GDPR transparency information. The withdrawal-of-consent information is conditional on consent being the lawful basis, DPO contact information is relevant only if a DPO has been appointed, and the recipient requirement may be met by providing categories of recipients rather than every organization’s name.