Notice (s. 5)

The information a Data Fiduciary must give you with, or before, every request for consent: the personal data it wants and the purpose, how you can exercise your rights and withdraw consent, and how to complain to the Board. Rule 3 of the DPDP Rules 2025 requires the notice to stand on its own, in clear and plain language, with an itemised description of the data and of the goods, services or uses it enables, and a link to the fiduciary's website or app. If you consented before the Act commenced, the fiduciary must still send you this notice as soon as reasonably practicable (s. 5(2)), in English or any language in the Eighth Schedule to the Constitution (s. 5(3)).

Every request made to a Data Principal under section 6 for consent shall be accompanied or preceded by a notice given by the Data Fiduciary to the Data Principal, informing her, (i) the personal data and the purpose for which the same is proposed to be processed; (ii) the manner in which she may exercise her rights under sub-section (4) of section 6 and section 13; and (iii) the manner in which the Data Principal may make a complaint to the Board, in such manner and as may be prescribed.