A practical checklist to review whether your privacy notice communicates what the DPDP Act expects.
Essential elements of a privacy notice
- Describe the personal data you collect and the specific purpose for which it is processed.
- Explain how individuals can exercise their rights and withdraw consent — withdrawal should be as easy as giving consent.
- Explain how individuals can raise grievances and how they can complain to the Data Protection Board.
- Present the notice in clear and plain language, and make it available in English or languages listed in the Eighth Schedule of the Constitution where required.
Good practices
Keep the notice standalone and easy to find, avoid bundling it with unrelated terms, and review it whenever your processing activities change.
This article provides general information and does not constitute legal advice.