-The right to be informed

For every piece of data held on Jane, she should be able to know how and why it’s being used.

It’s generally not enough for Mike to bury this information in a privacy policy. “Informing” a data subject means spelling it out in plain English, not legalese.

This information needs to be prominent. Jane shouldn’t have to go searching for it.