Which of the following documents should be communicated to customers to establish accountability for the use and protection of personal information?

Privacy standards are internal governance documents that define acceptable practices within the organization and are not typically communicated to customers as accountability instruments.

A privacy consent form captures a data subject's agreement to specific processing activities but does not comprehensively establish ongoing organizational accountability for all uses of personal information.

A privacy notice (also called a privacy policy) is a public-facing disclosure document required by regulations such as GDPR and CCPA that communicates to data subjects what personal information is collected, the purposes of processing, retention periods, data subject rights, and contact information for the responsible organization. It is specifically designed to create transparency and accountability between the organization and the individuals whose data it processes. No other listed document serves this external communication and accountability function.

Privacy procedures are internal operational instructions for staff on how to handle personal data and are not intended for communication to customers.