  It is important for organisations to ensure that their privacy policies are
General Data Protection Regulation (GDPR) compliant, and this has to be done by
the May 2018 deadline. However, it is also important for these policies to be
designed with the needs of the human recipient in mind. We carried out an
investigation to find out how best to achieve this.
  We commenced by synthesising the GDPR requirements into a checklist-type
format. We then derived a list of usability design guidelines for privacy
notifications from the research literature. We augmented the recommendations
with other findings reported in the research literature, in order to confirm
the guidelines. We conclude by providing a usable and GDPR-compliant privacy
policy template for the benefit of policy writers.
