Privacy Notice (India)
A DPDP Act-compliant privacy notice template for Indian businesses. Covers data collection purposes, rights of data principals, grievance officer details, and consent withdrawal instructions.
What's included
- Professionally drafted, legally reviewed content
- Regulation-specific guidance notes
- Placeholder fields with clear instructions
- Version control and update log
- Customisation guide included
How to use this template
- Fill in your organisation's details and the Grievance Officer contact. DPDP § 5 requires both in the notice.
- List the itemised purposes of processing. DPDP consent is purpose-specific — generic 'improving services' language fails the Section 6 standard.
- Translate the notice into at least one of the 22 Eighth Schedule languages your data principals use. The template includes a Hindi template; add additional languages as your user base grows.
- Link to the Consent Manager where the subject can withdraw consent and exercise their rights. Even if you don't yet use a registered Consent Manager (registration opened November 2026), the Section 11 withdrawal path has to be documented.
- Review quarterly and after any DPDP Rules revision.
Download template
Free to download. Just fill in your details.
Need an automated version of this document? TruePrivacy generates and maintains compliance documents automatically as your data processing activities change.
Try TruePrivacy freeFrequently asked questions
Do I need to translate the notice into all 22 Eighth Schedule languages?+
No. DPDP Rule 3 requires that the notice be available in English and in each of the 22 Eighth Schedule languages the data principal uses. In practice, offer English + Hindi by default and additional languages where a measurable user base exists.
What's the right notice format — long-form, layered, dynamic?+
The template is a layered notice — a short summary at the top, an itemised purposes table in the middle, and a full disclosure at the bottom. The PDPC/DPBI accept this format as long as the detail is reachable from the summary.
Can I use the same notice for employees and customers?+
Not without careful editing. Employee processing often relies on contractual necessity rather than consent — the lawful basis block and the rights block differ. Use /templates/employee-privacy-notice for the HR variant.
What's a Consent Manager and do I need to use one?+
Under DPDP, a Consent Manager is a registered intermediary that lets Data Principals manage their consents across multiple Fiduciaries. Registration opens November 2026; using one is optional but highly encouraged for consumer-facing businesses.
Does this notice work for Significant Data Fiduciaries?+
Yes. SDFs have additional disclosure obligations (DPO contact details, impact assessment summaries). The template includes an SDF annex to add when you're designated.
Beyond templates: automated compliance
Static templates are a start. TruePrivacy keeps your privacy documentation accurate and up to date automatically.
Free 14-day trial · No credit card required · Setup in minutes