Right to Be Informed
The right of a data subject to receive clear, upfront information about how their personal data will be collected and used.
Full Definition
The right to be informed is the baseline transparency right across privacy regimes. GDPR Articles 13 (direct collection) and 14 (indirect collection) require specified notice content at point of collection: controller identity, DPO contact, purposes, lawful basis, legitimate interests where relied on, recipient categories, transfer destinations, retention, rights, and complaint channel. Section 5 of India's DPDP Act and Rule 3 of the DPDP Rules 2025 impose an equivalent duty with additional multilingual requirements (English or any Eighth Schedule language).
In practice, satisfying this right means designing notices that are (a) standalone — the required content must be in the notice itself, not cross-referenced to an external privacy policy; (b) layered — a short summary at the top, structured detail below; and (c) multi-channel — delivered in the sign-up flow, before each new processing purpose, and persistently in the privacy policy. The right-to-be-informed is a product-design problem as much as a legal-drafting one, and badly delivered notices generate most of the DPA complaints that reach enforcement.
Related terms
Notice (DPDP s.5)
The itemised disclosure a Data Fiduciary must give a Data Principal before — or at the time of — requesting consent under Section 6 of the DPDP Act.
Notice at Collection
The point-of-collection disclosure required under CCPA/CPRA listing the categories of personal information collected and the purposes for which they are used.
Right to Access
A data subject's right to obtain confirmation of whether their personal data is being processed and to receive a copy of it.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.
Free 14-day trial · No credit card required · Setup in minutes