Templates for every stage of compliance.

Website Cookie Consent Notice

A layered cookie/consent banner and detailed notice for websites that process personal data of visitors in India.

Mobile App Consent Notice

An in-app consent flow notice covering permissions, data categories, and purpose limitation for mobile applications.

Section 7

Employee Data Processing Notice

A notice to employees explaining how HR and workplace personal data is processed under the employment legitimate-use ground.

Candidate / Recruitment Consent Notice

A consent and notice document for job applicants covering resume data, background checks, and assessment records.

Customer Onboarding Consent Notice

A point-of-onboarding notice and consent capture form for new customers signing up for a product or service.

Marketing Communications Consent Notice

A standalone opt-in/opt-out notice for marketing, promotional, and newsletter communications with clear withdrawal mechanics.

Vendor / Partner Data Sharing Notice

A notice informing data principals that their personal data will be shared with a named vendor or business partner and why.

Policies

Privacy Policy Template

A comprehensive, DPDP-aligned website/app privacy policy covering notice, rights, retention, and grievance redressal.

Data Retention Policy Template

An internal policy defining retention periods, review cycles, and erasure procedures for categories of personal data.

Data Breach Response Policy Template

An incident response policy detailing detection, assessment, containment, and intimation obligations for personal data breaches.

Data Classification Policy Template

A policy establishing data sensitivity tiers and corresponding handling controls to support DPDP security safeguard obligations.

Acceptable Use Policy (Personal Data Handling) Template

An internal employee-facing policy defining permitted and prohibited handling of personal data across systems and devices.

Section 9

Children's Data Processing Policy Template

A policy governing verifiable parental consent, age-gating, and the prohibition on tracking and targeted ads to children.

Third-Party Data Sharing Policy Template

An internal governance policy setting the standards, approvals, and due-diligence steps required before sharing personal data externally.

Contracts & DPAs

Data Processing Agreement (DPA) Template

A contract between a Data Fiduciary and its Processor allocating DPDP-compliant processing instructions and security obligations.

Sub-Processor Addendum Template

An addendum extending a Data Processing Agreement's obligations to an approved downstream sub-processor.

Section 16

Cross-Border Data Transfer Clause Template

A standalone contractual clause governing the transfer of personal data outside India in line with Section 16 of the DPDP Act.

Vendor Security Addendum Template

A security-focused addendum imposing technical and organisational safeguard requirements on vendors handling personal data.

Employee Confidentiality & Data Handling Clause Template

A contractual clause for employment agreements binding staff to confidentiality and DPDP-compliant personal data handling duties.

Consent Manager Integration Agreement Template

An agreement between a Data Fiduciary and a registered Consent Manager governing integration, consent syncing, and liability.

Data Sharing Agreement Between Fiduciaries Template

An agreement allocating DPDP Act responsibilities between two independent Data Fiduciaries sharing personal data for related purposes.

Internal Registers & Trackers

Record of Processing Activities (ROPA) Template

A structured register for logging every personal data processing activity to support Section 8 accountability obligations.

Section 8(6)

Data Breach Log Template

A running log to record, triage, and track every personal data breach incident from detection through closure.

Sections 11-13

Rights Request Log Template

A tracker for logging and resolving Data Principal requests for access, correction, erasure, nomination, and grievance redressal.

Section 8(2)

Vendor Risk Register Template

A register to assess and monitor the DPDP-related risk posture of every data processor and sub-processor engaged.

Section 10

DPIA (Data Protection Impact Assessment) Template

A structured assessment template for evaluating privacy risk before launching a new or higher-risk processing activity.

Section 8(7)

Retention Schedule Template

A schedule mapping each data category to its retention period, erasure trigger, and disposal method.

Compliance Evidence Index Template

A master index linking every DPDP compliance obligation to the evidence document that proves it has been met.

Letters & Correspondence

Section 8(6)

Breach Intimation Letter to the Data Protection Board

A formal letter template to intimate the Data Protection Board of India of a personal data breach without delay.

Section 8(6)

Breach Notification Letter to Affected Data Principals

A plain-language notification letter to inform affected individuals of a data breach and the steps being taken.

Section 11

Response Letter to an Access Request

A response letter template for confirming and fulfilling a Data Principal's right to access information under Section 11.

Section 12

Response Letter to an Erasure Request

A response letter template confirming action taken on a Data Principal's request for correction or erasure under Section 12.

Section 15

Response Letter Declining a Frivolous Request

A response letter template for declining a request that is frivolous, vexatious, or made in bad faith under Section 15.

Consent Withdrawal Confirmation Letter

A confirmation letter acknowledging a Data Principal's withdrawal of consent and outlining the consequent actions taken.

Board & Governance

Section 10

DPO Appointment Letter Template

A formal internal letter appointing a Data Protection Officer and defining their mandate, authority, and reporting line.

Data Protection Committee Charter Template

A charter establishing the mandate, composition, and operating rhythm of an internal committee overseeing DPDP compliance.

Board Reporting Template for Privacy Metrics

A recurring report format for briefing the Board or leadership on the organization's DPDP compliance posture and metrics.

Section 10

Annual DPIA Summary Report Template

A consolidated annual report summarizing all DPIAs conducted during the year, prepared for Board and audit review.

Voluntary Undertaking Draft Template (for Board submissions)

A draft voluntary undertaking template for submission to the Data Protection Board of India in connection with a matter under inquiry.