tiktok³ÉÈ˰æ

Data Processing Notice Template for United States

Create a bespoke document in minutes,  or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Data Processing Notice

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership of your information

Key Requirements PROMPT example:

Data Processing Notice

"I need a Data Processing Notice for my healthcare technology startup that processes patient data in California and New York, with specific sections addressing HIPAA compliance and automated decision-making in our AI diagnostic tools."

Document background
The Data Processing Notice serves as a crucial compliance document in the U.S. privacy landscape, required by various federal and state regulations. It provides transparency about an organization's data processing activities and helps meet legal obligations under laws such as the CCPA/CPRA, HIPAA, and GLBA. The notice should be provided to individuals before or at the point of data collection, detailing the types of data collected, processing purposes, sharing practices, and individual rights regarding their personal information.
Suggested Sections

1. Purpose of Processing: Explains why the organization collects and processes personal data

2. Types of Data Processed: Lists categories of personal data being processed

3. Legal Basis for Processing: Explains the legal grounds for data processing

4. Data Retention Period: Specifies how long data will be kept

5. Data Subject Rights: Lists rights of individuals regarding their data

Optional Sections

1. International Transfers: Details on cross-border data transfers and associated safeguards - required if data is transferred outside the US

2. Special Categories of Data: Specific provisions for processing sensitive data such as health information, biometric data, or other special categories

3. Automated Decision Making: Information about algorithmic processing and profiling activities, including logic involved and significance of automated decisions

Suggested Schedules

1. Data Categories Matrix: Detailed breakdown of data types, processing purposes, retention periods, and legal bases in table format

2. Security Measures: Comprehensive list of technical and organizational measures implemented for data protection

3. Subprocessor List: List of third-party data processors, their locations, and processing purposes

Authors

Alex Denne

Head of Growth (Open Source Law) @ tiktok³ÉÈ˰æ | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

Clauses

























Industries

FTC Act: Federal Trade Commission Act, specifically Section 5 regarding unfair or deceptive practices in data processing and privacy

GLBA: Gramm-Leach-Bliley Act - Applies when financial data is involved in data processing activities

HIPAA: Health Insurance Portability and Accountability Act - Applies when healthcare data is involved in data processing activities

COPPA: Children's Online Privacy Protection Act - Applies when collecting and processing data from children under 13 years of age

CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act - Comprehensive state privacy laws that often set de facto national standards for data processing

VCDPA: Virginia Consumer Data Protection Act - State-specific privacy legislation for data processing in Virginia

CPA: Colorado Privacy Act - State-specific privacy legislation for data processing in Colorado

UCPA: Utah Consumer Privacy Act - State-specific privacy legislation for data processing in Utah

CTDPA: Connecticut Data Privacy Act - State-specific privacy legislation for data processing in Connecticut

GDPR Considerations: General Data Protection Regulation considerations when processing data of EU residents, even in US-based operations

PCI DSS: Payment Card Industry Data Security Standard - Applies when processing payment card data as part of data processing activities

Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks,  Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination,  Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

Privacy Notice Disclosure

A U.S.-compliant legal document that outlines how an organization handles personal information under federal and state privacy laws.

find out more

Ccpa Privacy Notice

A California Consumer Privacy Act (CCPA) compliant privacy notice that details how businesses handle personal information of California residents and their privacy rights under California law.

find out more

Simplified Privacy Notice

A user-friendly document explaining data collection and privacy practices under U.S. privacy laws.

find out more

Consent And Privacy Notice

A U.S.-compliant legal document that outlines data collection and processing practices while obtaining necessary consents from individuals.

find out more

Care Home Privacy Notice

A U.S.-compliant privacy notice for care homes detailing how resident information is collected, used, and protected under HIPAA and state laws.

find out more

Privacy Notification

A U.S.-compliant notification detailing how organizations collect, use, and protect personal information under federal and state privacy laws.

find out more

Short Privacy Notice

A concise document outlining essential data privacy practices, compliant with U.S. federal and state privacy laws.

find out more

Privacy Notice Form

A legal document outlining an organization's personal data handling practices, compliant with U.S. federal and state privacy laws.

find out more

Privacy Notice For Customers

A U.S.-compliant legal document that explains to customers how their personal information is collected, used, and protected.

find out more

Employer Privacy Notice

A US-compliant document detailing how an organization handles employee personal information and data privacy rights.

find out more

Privacy Notice Gdpr

A GDPR-compliant privacy notice for US-based organizations processing EU residents' personal data, addressing both EU and US privacy requirements.

find out more

Website Cookies Notice

A legal document for U.S. websites explaining cookie usage and user privacy rights under state and federal laws.

find out more

Privacy Disclosure Notice

A U.S.-compliant document detailing an organization's personal data collection and processing practices under federal and state privacy laws.

find out more

Personal Data Protection Notice

A U.S.-compliant notice explaining how an organization handles personal data under federal and state privacy laws.

find out more

Employee Data Privacy Notice

A U.S.-compliant notice informing employees about the collection and use of their personal data, meeting federal and state privacy requirements.

find out more

Data Processor Privacy Notice

A US-compliant legal document outlining how an organization processes personal data as a data processor, ensuring compliance with federal and state privacy laws.

find out more

Standard Privacy Notice

A legally required document outlining an organization's data privacy practices in compliance with U.S. federal and state privacy laws.

find out more

Client Privacy Notice

A legally mandated document outlining how organizations handle client personal information under U.S. federal and state privacy laws.

find out more

Personal Data Notice

A US-compliant notice detailing how personal data is collected, used, and protected under federal and state privacy laws.

find out more

Privacy Notice Statement

A U.S.-compliant legal document that explains how an organization handles personal information under federal and state privacy laws.

find out more

External Privacy Notice

A legally required document outlining an organization's data privacy practices under U.S. federal and state privacy laws.

find out more

Data Collection Notice

A legally required document under U.S. privacy laws that explains how personal data is collected, used, and shared.

find out more

Company Privacy Notice

A U.S.-compliant legal document outlining a company's personal data collection and processing practices under federal and state privacy laws.

find out more

Data Processing Notice

A U.S.-compliant notice explaining how an organization processes personal data under federal and state privacy laws.

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: /our-research
Oops! Something went wrong while submitting the form.

³Ò±ð²Ô¾±±ð’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a £1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our for more details and real-time security updates.