Section 5Obligations of Data Fiduciary
Notice
Official statutory text · Gazette of India
Where personal data of a Data Principal is to be processed on the basis of consent, the Data Fiduciary shall, before or at the time of seeking consent, give the Data Principal an itemised notice in clear and plain language containing a description of the personal data sought to be collected and the purpose of processing, the manner in which she may exercise her rights, and the manner in which she may make a complaint to the Board.
Plain-language explanation
- Notice must be itemised — a vague, single blanket statement covering 'all purposes' does not meet this bar.
- It has to be understandable in plain language, provided upfront (not buried after data is already collected), and must tell the individual how to exercise rights and where to complain.
Reconstructed for readability from the publicly notified DPDP Act, 2023. Always verify exact wording against the official Gazette of India before relying on this for legal or compliance decisions.