In what form must a privacy notice be delivered to customers?

The correct answer regarding the delivery of a privacy notice to customers emphasizes the importance of providing this information in a written format that allows customers to retain it for their records. This requirement aligns with privacy regulations, such as the GDPR and CCPA, which mandate that individuals be informed about their data rights in an accessible manner.

Providing the privacy notice in writing ensures that customers have a clear, tangible reference to understand what data is being collected, how it will be used, and their rights concerning that data. It is crucial that individuals can review this information at their convenience, as it empowers them to make informed decisions about their personal data and enhances transparency from the organization.

In this context, verbal communication does not suffice because it lacks the retention capability that allows customers to revisit the information whenever needed. Likewise, relying solely on emails or phone calls could lead to important details being overlooked or forgotten, especially if customers do not have an easy way to retrieve that information later. While incorporating privacy information in marketing materials may raise awareness, it does not satisfy the regulatory requirements for a standalone privacy notice that clearly outlines customer rights and data practices.