The legislation outlines that a business needs to display their Privacy Policy where it is easiest for their clients to view. For most businesses that is their website.