diff --git a/app/templates/views/privacy.html b/app/templates/views/privacy.html
index 52c649227..c1184ec4b 100644
--- a/app/templates/views/privacy.html
+++ b/app/templates/views/privacy.html
@@ -17,7 +17,7 @@
       }
     ) }}
 
-    <h2 class="heading-medium">Who we are</h2>
+    <h2 class="heading-medium" id="who-we-are">Who we are</h2>
 
     <p class="govuk-body">GOV.UK Notify is a service that lets public service teams in the UK send emails, text messages, and letters
       to users of their service.</p>
@@ -31,7 +31,7 @@
     <p class="govuk-body">For more information see the Information Commissioner’s Office (ICO) <a class="govuk-link govuk-link--no-visited-state" href="https://ico.org.uk/esdwebpages/search">Data Protection Public Register</a>.
       The Cabinet Office registration number is: Z7414053</p>
 
-    <h2 class="heading-medium">What data we collect from you</h2>
+    <h2 class="heading-medium" id="what-data-we-collect-from-you">What data we collect from you</h2>
 
     <p class="govuk-body">The personal data we collect from public sector employees that create a GOV.UK Notify account includes:</p>
 
@@ -45,11 +45,11 @@
     <p class="govuk-body">The legal basis for processing this data is ‘public task’ – allowing you to access GOV.UK Notify to send notifications
       to users of your public service.</p>
 
-    <h2 class="heading-medium">Why we need your data</h2>
+    <h2 class="heading-medium" id="why-we-need-your-data">Why we need your data</h2>
 
     <p class="govuk-body">We need your personal data to ensure that only legitimate users of GOV.UK Notify can use it to send notifications.</p>
 
-    <h2 class="heading-medium">What we do with your data</h2>
+    <h2 class="heading-medium" id="what-we-do-with-your-data">What we do with your data</h2>
 
     <p class="govuk-body">We use your data to check that you are allowed to access GOV.UK Notify and to record your activity when using it. We use third party suppliers to do this.</p>
 
@@ -62,31 +62,31 @@
 
     <p class="govuk-body">We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.</p>
 
-    <h2 class="heading-medium">How long we keep your data</h2>
+    <h2 class="heading-medium" id="how-long-we-keep-your-data">How long we keep your data</h2>
 
     <p class="govuk-body">We will retain your personal data for as long as you have a GOV.UK Notify account.</p>
 
-    <h2 class="heading-medium">Where your data is processed and stored</h2>
+    <h2 class="heading-medium" id="where-your-data-is-processed">Where your data is processed and stored</h2>
 
     <p class="govuk-body">We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s
       processed and when it’s stored.</p>
 
     <p class="govuk-body">Your personal data will be processed both in the UK and the European Economic Area (EEA). Your data receives the same level of protection in the EEA as it does in the UK through the safeguard of <a class="govuk-link govuk-link--no-visited-state" href="https://ico.org.uk/for-organisations/dp-at-the-end-of-the-transition-period/data-protection-and-the-eu-in-detail/adequacy/">Adequacy Decisions</a>.</p>
    
-    <h2 class="heading-medium">How we protect your data and keep it secure</h2>
+    <h2 class="heading-medium" id="how-we-protect-your-data">How we protect your data and keep it secure</h2>
 
     <p class="govuk-body">We are committed to doing all that we can to keep your data secure. To prevent unauthorised access or disclosure we have
       put in place technical and organisational procedures to secure the data we collect about you – for example, we protect your
       data using varying levels of encryption. We also make sure that any third parties that we deal with have an obligation to
       keep all personal data they process on our behalf secure.</p>
 
-    <h2 class="heading-medium">Children’s privacy protection</h2>
+    <h2 class="heading-medium" id="childrens-privacy-protection">Children’s privacy protection</h2>
 
     <p class="govuk-body">We understand the importance of protecting children’s privacy online. Our services are not designed for, or intentionally
       targeted at, children 13 years of age or younger. It is not our policy to intentionally collect or maintain data about anyone
       under the age of 13.</p>
 
-    <h2 class="heading-medium">What are your rights</h2>
+    <h2 class="heading-medium" id="your-rights">What are your rights</h2>
 
     <p class="govuk-body">You have the right to request:</p>
 
@@ -106,14 +106,14 @@
 
     <p class="govuk-body">If you have any of these requests, get in contact with our Data Protection Officer - you can find their contact details below.</p>
 
-    <h2 class="heading-medium">Changes to this notice</h2>
+    <h2 class="heading-medium" id="changes-to-this-notice">Changes to this notice</h2>
 
     <p class="govuk-body">We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, we will
       amend the last modified date at the top of this page. Any modification or amendment to this privacy notice will be applied
       to you and your data as of that revision date. We encourage you to periodically review this privacy notice to be informed
       about how we are protecting your data.</p>
 
-    <h2 class="heading-medium">Questions and complaints</h2>
+    <h2 class="heading-medium" id="questions-and-complaints">Questions and complaints</h2>
 
     <p class="govuk-body">Contact the GDS Privacy Team if you either:</p>