Notice given by Data Fiduciary
Itemised, plain-language notice with the means to withdraw consentBefore collecting data, a Fiduciary must give a standalone notice in clear language.
Download full Rules (PDF)In plain English
Before collecting data, a Fiduciary must give a standalone notice in clear language. It must list exactly what data is collected, why, and what product or service it enables. It must also tell people how to withdraw consent as easily as they gave it, exercise their rights, and complain to the Board.
Key points
- Notice must stand on its own - not buried in terms and conditions
- Minimum: itemised data list + specific purpose + goods/services description
- Must include a link and other ways to withdraw consent, exercise rights, and complain
This rule gives effect to Section 5 of the Digital Personal Data Protection Act, 2023.
Read the parent sectionOfficial rule text
Reproduced from the Gazette notification (G.S.R. 846(E), 13 November 2025).
3. Notice given by Data Fiduciary to Data Principal. - The notice given by the Data Fiduciary to the Data Principal shall - (a) be presented and be understandable independently of any other information that has been, is or may be made available by such Data Fiduciary; (b) give, in clear and plain language, a fair account of the details necessary to enable the Data Principal to give specific and informed consent for the processing of her personal data, which shall include, at the minimum, - (i) an itemised description of such personal data; and (ii) the specified purpose or purposes of, and specific description of the goods or services to be provided or uses to be enabled by, such processing; and (c) give, the particular communication link for accessing the website or app, or both, of such Data Fiduciary, and a description of other means, if any, using which such Data Principal may - [भाग II - खण् ड 3(i)] भारत का रािपत्र : असाधारण 25 (i) withdraw her consent, with the ease of doing so being comparable to that with which such consent was given; (ii) exercise her rights under the Act; and (iii) make a complaint to the Board.