Each individual should be informed about their rights, obligations, policies, means of redress etc e There should be an audit trail of the receipt and understanding of this information where nnecessary .g. as a basis of freely-given consent for GDPR