What is a DPDP notice?
A DPDP notice is the plain-language statement a business must give you at or before collecting your personal data — telling you what it’s collecting, why, and how to act on your rights. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), it’s what makes your consent “informed.”
Educational resource only — not legal advice.
The notice has to stand on its own and be understandable without digging through other documents. It must itemise the personal data being collected and the specific purpose for each, and explain how to withdraw consent, exercise your rights, raise a grievance, and complain to the Data Protection Board of India.
Why it matters to you. As an individual, the notice is your cue to know exactly what you’re agreeing to before you hand anything over. As a business, giving a proper notice is mandatory — there is no valid consent without it.
What it is not. A DPDP notice is not the same as a privacy policy. A privacy policy is a broader, standing document; the notice is purpose-specific and given at the point of collection. A general policy someone might read later does not satisfy the notice requirement.
Collecting personal data from your own customers?
These are the rights your business has to honour. See where you stand with a two-minute self-check — no sign-up, no data stored.
Run the compliance self-check →