Privacy Notice Format under the DPDP Act, 2023
Prepare the notice a business gives when it asks for consent to process personal data, in the itemised form the DPDP Rules require.
What it is
The Digital Personal Data Protection Act, 2023 requires a Data Fiduciary, any business that decides why and how personal data is processed, to give a notice with or before every request for consent (Section 5). Rule 3 of the DPDP Rules, 2025 adds that the notice must be understandable on its own and give an itemised description of the personal data and the specific purposes, a link to withdraw consent as easily as it was given, and how the person can exercise their rights and complain to the Data Protection Board of India.
When it is used
- Websites and apps that collect names, phone numbers, e-mail or payment data.
- Customer onboarding forms, KYC and loyalty programmes.
- Employers, schools, clinics and professional firms handling personal data.
What the template covers
- Identity and contact details of the business and its contact person or DPO
- Itemised personal data collected
- Purposes and goods or services each is used for
- Retention period and deletion
- Processors and transfers outside India
- Rights of the Data Principal and withdrawal of consent
- Grievance redressal and complaint to the Data Protection Board
Details you will need
The generator asks for the following. Fields marked with an asterisk in the form are required; the rest can be left blank and filled in later in Word.
Notice Details
Effective Date of this Notice; Version (optional); Where the Notice is Given
Data Fiduciary
Name of the Business; Registered / Office Address; Website / App; Goods / Services Offered; Notified as a Significant Data Fiduciary?
Contact for Data Questions
Name / Title of DPO or Contact Person; E-mail; Phone (optional); Link / Form for Requests and Withdrawal of Consent (optional); Grievance Response Time (days)
Personal Data and Purposes
Personal Data Processed: Category, Data Items, Specified Purpose, Legal Ground, Retention Period
Sharing
Data Processors / Recipients (optional); Is Data Stored or Processed outside India?; Countries / Services outside India (if yes)
Children and Cookies
Do you knowingly process data of children (under 18)?; Website uses non-essential cookies / analytics?
Stamp duty, registration and filing
The DPDP Rules, 2025 were notified on 13 November 2025 and come into force in phases. Under the notification as published, Rule 3 on notice, and most obligations of Data Fiduciaries, apply 18 months after notification, that is from 13 May 2027; a proposal to shorten this has been discussed, so check the current position on meity.gov.in. Grievances must be answered within the period the business publishes, not exceeding 90 days. Penalties under the Schedule to the Act can be up to ₹250 crore for some failures.
Generate the Privacy Notice under the DPDP Act, 2023
Fill in the form and download the draft as a Word file. It is a general template, not legal or professional advice; have it reviewed for your facts before you sign or rely on it.
Need this checked against your facts, or the registration or filing that follows? Contact SKAG and Associates
Related documents
Frequently asked questions
Is a privacy notice the same as a privacy policy?
Not exactly. The DPDP notice is given with each consent request and must be itemised and specific. Many businesses publish it as the core of their privacy policy and link it from every form.
When does the notice requirement apply?
Under the DPDP Rules as notified, Rule 3 applies from 13 May 2027. Check meity.gov.in for any amendment to the timeline.
Do small businesses need a DPO?
A Data Protection Officer is mandatory only for a Significant Data Fiduciary notified by the Government. Other businesses must still publish the contact details of a person who can answer questions about personal data.
This page gives general information for reference only. Laws, stamp duty rates and filing requirements change and differ between States, so confirm the current position for your case. Related: all document templates · free tax calculators · compliance calendar and guides.