DPDP Act 2023 · Obligations

Section 5: Notice

What Section 5 says, in plain English

Before or at the time of asking for consent, the Data Fiduciary must give a plain-language notice listing the personal data collected, the purpose, how the data principal can exercise rights, and how to complain to the Board.

What it means for you

Rule 3 of DPDP Rules 2025 adds regional-language and accessibility requirements. Rewrite generic 'we may collect' privacy policies into itemised Section 5 notices per processing activity.

How this is operationalised in dcomply

The Consent Notice module builds Section 5 notices per processing activity, with Rule 3 regional-language support. Notices are versioned so a Board inquiry can see exactly what was shown to a data principal on a given date.

Other sections in Obligations

Section 4: Grounds for processing Section 6: Consent Section 7: Certain legitimate uses Section 8: General obligations of Data Fiduciary Section 9: Children's data Section 10: Additional obligations for Significant Data Fiduciaries

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 4: Grounds for processing All sections Section 6: Consent →