Free interactive tool
DPDP privacy notice generator
Six fields in, a section 5-structured notice draft out — free to copy or download. The statutory skeleton is verified against the Gazette text; your inputs fill it.
What the law actually requires
Three things every notice must say
Section 5(1): the personal data and purpose; how to exercise the withdrawal and grievance rights; and how to complain to the Data Protection Board. Miss one and the notice fails its statutory job.
Pre-existing consents need notice too
Section 5(2): where consent was given before commencement, notice must follow as soon as reasonably practicable - your existing user base is in scope, not just new signups.
The clock is the runway
The substantive notice and consent duties commence with DPDP Phase III (May 2027). Notices, consent flows and withdrawal mechanics take quarters to rebuild - the runway is for working, not waiting.