Confidential Dispatch

Good vs bad consent notice, annotated

Before you collect

A consent notice, side by side

The same request done badly and well. Six things decide whether a DPDP consent notice actually holds — here is where each one lands.

A bad consent notice A sample consent notice from a firm, labelled a bad example: a vague catch-all purpose, a pre-ticked bundled consent box, and no way to withdraw. Three numbered pins mark the problems. Bad example Consent to collect your details Sharma & Associates · Chartered Accountants WHAT WE COLLECT Full name PAN PURPOSE To keep on file for our records and any other business purposes we may have, now or in the future. 1 I agree to all of the above. 2 By continuing you accept our terms. 3 Continue A good consent notice A sample consent notice from the same firm, labelled a good example: a specific itemised purpose with a retention period, an unticked box tied to that one purpose, and a clear way to withdraw and reach a grievance contact. Three numbered pins mark what makes it valid. Good example Consent to collect your details Sharma & Associates · Chartered Accountants WHAT WE COLLECT Full name PAN PURPOSE Prepare & file your FY24–25 income-tax return. Deleted when the engagement ends — nothing else. 4 I agree to this purpose. 5 Withdraw anytime, in writing. [email protected] 6 Continue
What makes it bad
1

Vague, catch-all purpose

“Our records and any other business purpose” isn’t a purpose. Consent has to name a specific use, so the person knows exactly what they’re agreeing to.

2

Pre-ticked and bundled

The box is already ticked and covers everything at once. Consent must be a free, specific action the person takes — not a default they have to undo.

3

No way to withdraw

There’s no way to take consent back and no one to contact. A notice should say how to withdraw and how to reach a grievance officer.

What makes it good
4

Specific, itemised purpose

One clear use, in plain words, with how long the data is kept. The person can see exactly what they’re agreeing to and for how long.

5

Unticked and specific

The box starts empty, so agreeing is a deliberate act — and it’s tied to that one purpose, not a bundle.

6

Easy to withdraw

It says how to withdraw consent and gives a contact, so the choice stays with the person after they’ve made it.

Illustrative example — not legal advice. What a valid consent notice needs →

This is a mock. The firm name, email, and details shown are illustrative, not a real business.

Related reading

  • What a legally valid consent notice looks like in India — with real examples — the full explainer this teardown illustrates.
  • DPDP consent, explained — the underlying law a notice has to satisfy: free, specific, informed, unconditional, unambiguous.
  • Pre-ticked boxes and good consent design — the design mistake behind pins 2 and 5.
  • Granular vs bundled consent — why one “I agree to all” fails, and how to split by purpose.
  • Consent vs deemed consent vs legitimate use — for when consent isn’t the right basis at all.

Reviewed by Confidential Dispatch Editorial Team

Last updated 10 July 2026

Not legal advice.