2018 Privacy Policy vs 2026 Privacy Policy

Area	2018 Policy	Updated Version	Change Type	Why it Matters
Scope & introduction	UK/EU-focused notice	Explicit UK + US applicability	Expanded	Reflects global membership access and modern expectations
Controller identification	States AOC is controller	Retained and clarified	Clarified	Improves regulatory clarity
Contact details	Provided	Retained	Unchanged	Already compliant
Data collection description	Basic list of fields	Structured categories of collection	Clarified	Improves transparency/readability
Third-party data disclosure warning	Mentioned	Retained	Unchanged	Still appropriate
Purpose of processing	Membership/admin described	Structured list of purposes	Clarified	Aligns with GDPR transparency expectations
Year Book inclusion	Included	Retained with clearer opt-out	Clarified	Better consent framing
Emergency contact use	Mentioned	Retained with clearer limitation	Clarified	Strengthens proportionality explanation
Legal basis statement	Contract & legitimate interest implicit	Explicit legal basis section	Expanded	Required for modern GDPR transparency
Marketing usage	Simple consent statement	Structured marketing section	Clarified	Meets modern expectations
Sale of data	Stated not sold	Retained	Unchanged	Good practice
Data sharing	MSA / printers / legal	Structured list of recipients	Clarified	Better accountability signalling
International transfers	Not addressed	Explicit section	New	Required when services may operate abroad
Website cookies	States none used	Retained but softened wording	Clarified	Reduces compliance risk if site changes
External links disclaimer	Included	Retained	Unchanged	Still valid
Security measures	High-level statement	Retained	Unchanged	Appropriate proportionality
Retention policy	Very limited reference	Dedicated retention section	Expanded	Key ICO expectation
Skeleton record note	Included	Retained	Unchanged	Preserves operational reality
Data subject rights	Basic access/correction	Full structured rights list	Expanded	Reflects current regulatory expectations
ICO complaint reference	Included	Retained	Unchanged	Required and appropriate
US user rights	Not addressed	Included	New	Supports cross-border defensibility
Children’s data	Not addressed	Included	New	Standard modern policy inclusion
Policy update process	Included	Retained	Unchanged	Still appropriate
Document structure	Narrative text	Sectioned compliance structure	Clarified	Easier comprehension & auditability
Tone & clarity	Informal / legacy wording	Plain legal-administrative clarity	Clarified	Improves defensibility

---

Executive Summary (Plain Interpretation)

From a governance perspective, the update introduces five material compliance improvements:

1️⃣ Explicit legal basis transparency
2️⃣ Data retention disclosure
3️⃣ International transfer acknowledgement
4️⃣ Expanded rights articulation
5️⃣ US jurisdiction accommodation

Everything else is largely structural modernisation rather than behavioural change.