Skip to content
DPDP
Free · in browser·8 min · no account

A compliant first draft in your language

Section 5 wants an itemised notice — what you collect, why, how rights are exercised, and how to complain — available in English or any of the 22 Eighth Schedule languages. This produces a first draft from your actual purposes, not a template with your name pasted in.

Start nowAll free tools
Time needed
8 minTime needed
Signup steps
0Signup steps
Maps to
Section 5Maps to

The tool

Who you are

Section 8(9) makes publishing the Grievance Officer’s details mandatory. Typed here only — nothing leaves your browser.

What you collect data for
Languages

Publishing three well beats publishing all 22 badly.

2Purposes
0Need consent
6Data fields

Fill in your entity name, Grievance Officer and email — the notice cannot be published with placeholders.

dpdp-notice-draft.txt
NOTICE UNDER SECTION 5, DIGITAL PERSONAL DATA PROTECTION ACT, 2023

[Legal entity name] ("we") is the Data Fiduciary for the personal data described below.
This notice tells you what we collect, why, and how you can exercise your rights.

1. WHAT WE COLLECT AND WHY

  1.1  Creating and running your account
        Purpose:        To register you, authenticate logins and keep your profile current.
        Personal data:  Name, Email address, Mobile number, Password hash
        Retained for:   For as long as the account is active, then 90 days
        Basis:          Necessary to provide the service you asked for

  1.2  Answering support requests
        Purpose:        To respond to your questions and keep a record of what was resolved.
        Personal data:  Name, Email address, Message content, Prior ticket history
        Retained for:   24 months from the last interaction
        Basis:          Necessary to provide the service you asked for

2. YOUR CONSENT

  Every purpose above is necessary to provide the service you
  requested. We do not process your data for any other purpose.

3. YOUR RIGHTS AS A DATA PRINCIPAL

  -  Access a summary of your data and who we shared it with (S.11)
  -  Correct, complete or update inaccurate data (S.12)
  -  Erase data once its purpose is served (S.12)
  -  Nominate someone to exercise these rights for you (S.14)
  -  Raise a grievance and receive a response (S.13)

  To exercise any right, write to [grievance email].

4. GRIEVANCE REDRESSAL

  Grievance Officer:  [Grievance Officer name]
  Email:              [grievance email]

  If we do not resolve your grievance, you may complain to the
  Data Protection Board of India.

5. LANGUAGES

  This notice is available in: English, हिन्दी (Hindi).
  You may ask for it in any language in the Eighth Schedule.

A starting point, not a finished document. Your counsel must review it before publication — we can help.

3 questions

Common questions

How Consent Notice Generator works, what it can and cannot see, and what happens to anything you enter.

No. It is a starting point that still needs your entity details, your Grievance Officer, and your counsel's review.

Other free tools

30 minutes·one real data flow

Ready to Simplify DPDP Compliance?

Most vendors open a deck. We open the product, map one of your real data flows, and tell you honestly how far you are from compliant.

Book a DemoContact Sales
  • No slides
  • No obligation
  • Data stays in India

What the 30 minutes looks like

  1. 0–5Your stack, in your wordsWhere data lands today, and who already owns it.
  2. 5–15One real flow, mapped liveWe connect a sample source and build the map on the call.
  3. 15–25Where you are exposedThe gaps we can see, ranked — including the ones you already knew.
  4. 25–30Effort and costWhat closing them takes, and whether we are the right answer.

If we are not the right fit, we will say so on the call rather than three follow-ups later.