Is it true that information provision should happen within a reasonable timeframe after indirect collection?

The statement that information provision should happen within a reasonable timeframe after indirect collection is indeed true. Under the General Data Protection Regulation (GDPR), individuals have the right to be informed about the collection and use of their personal data, regardless of whether it is collected directly from them or indirectly from other sources.

When data is collected indirectly, organizations must still ensure transparency and uphold the individuals' rights. The GDPR mandates that organizations provide information about the processing of personal data, including the source of the data, the purposes of processing, and the data subject's rights. Doing so within a reasonable timeframe is essential for maintaining trust and ensuring individuals are aware of how their information is being used.

Furthermore, while the GDPR does not specify an exact timeframe, it encourages organizations to act promptly to prevent individuals from being left uninformed about how their data is being handled, which could affect their decision-making concerning their data rights.

Thus, providing this information in a timely manner after indirect data collection aligns with best practices for transparency and compliance with data protection law.