DPDP Privacy Policy Generator
Fill 8 short fields. Get a paste-ready privacy notice that maps to every section of the DPDP Act 2023 and the DPDP Rules 2025 — consent, DSR rights, DPO, breach notification, SDF status, children's data, cross-border transfer. Copy the HTML straight into your website.
What a DPDP-compliant privacy notice must contain
Section 5 of the Digital Personal Data Protection Act 2023 requires every Data Fiduciary to give Data Principals an itemised notice at or before the point of collection. Rule 3 of the DPDP Rules 2025 adds specific requirements around clear language and translation into the 22 Eighth-Schedule languages on request. At a minimum, a compliant notice must state:
- The personal data being collected and the specified purpose of processing;
- How the Data Principal may exercise their rights under Sections 11–14 (access, correction, erasure, grievance, nomination);
- The manner of making a complaint to the Data Protection Board;
- Contact details of the Grievance Officer / DPO;
- The manner of withdrawing consent, which must be as easy as giving it;
- Whether the data will be transferred outside India (Section 16);
- Whether the Fiduciary is a Significant Data Fiduciary (Section 10);
- How children's data (Section 9) is handled, if any.
A privacy notice on its own is not compliance. It's a set of promises you make to your users. Actually delivering on those promises — capturing consent with itemised notice, responding to DSR requests within 90 days, notifying breaches to the DPB, purging data on time — is what dcomply's DPDP module handles.
This tool provides a starting point only. Review with qualified counsel before publishing. dcomply is not a legal advisor.