Why does one privacy policy not satisfy the DPDP Act? The DPDP Act 2023 requires a clear notice to the Data Principal at the point where their personal data is collected (Section 5). Because organisations collect data at many touchpoints — website, mobile app, CCTV, call recording, HR onboarding, marketing sign-ups — each needs its own context-appropriate notice. A single website privacy policy does not cover a CCTV camera at reception or a recorded support call. This pack provides a consistent notice for every touchpoint.
One website policy isn't enough. Get DPDP notices for every place you collect data — website, app, CCTV, call recording, HR and marketing — in one consistent pack.
1.1 This Notice explains what personal data [your organisation] collects through this website, why, and your rights under the DPDP Act 2023. We collect the information you submit through forms, and limited technical data, only for the purposes stated at the point of collection.
1.2 You may withdraw consent, and request access, correction or erasure of your data, by contacting our Grievance Officer at the address below. We retain data only as long as necessary for the stated purpose.
2.1 A short, signage-ready notice informing visitors that the premises are under CCTV surveillance, the purpose (safety and security), how long footage is retained, and how to contact the organisation about their data — the notice most organisations forget.
2.2 Designed to be printed at entrances and reception, satisfying the Section 5 requirement to give notice at the point of collection.
Based on the touchpoints you selected, the full pack will include a matching notice for each:
Section 5 of the DPDP Act 2023 requires that a Data Principal be given a clear notice at or before the time their personal data is collected, stating what is collected and why. The obligation attaches to the moment of collection — not to a single document buried in a website footer.
That means every distinct collection point needs its own appropriate notice: a camera at reception, a recorded support line, an HR onboarding form and a marketing sign-up all collect data in different contexts and all require notice.
Most organisations publish a website privacy policy and stop there, leaving the riskiest touchpoints uncovered.
This pack gives you a consistent, on-brand notice for every touchpoint, all drawing on the same DPDP language, so your messaging is coherent and defensible. For a tailored notice review across a complex estate, NitiBharat offers fixed-fee support.
One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.
No spam. Unsubscribe with one click, anytime.
