ºÚÁÏÊÓƵ

The Data Privacy Notice and Consent Form is a fundamental document required for compliance with Indian data protection regulations, including the IT Act 2000, IT Rules 2011, and the Digital Personal Data Protection Act 2023. Organizations must use this document whenever collecting personal data from individuals (data principals) in India. The document serves to inform individuals about their data processing activities and obtain explicit consent. It typically includes information about the types of data collected, purposes of collection, data sharing practices, security measures, retention periods, and individual rights. The form should be provided before or at the time of data collection and must be written in clear, plain language that is easily understood by the average person. Regular updates may be required as privacy practices evolve or regulations change.

1. Introduction and Parties: Identifies the data controller/organization and the data principal (individual whose data is being collected)

2. Definitions: Key terms used in the notice including personal data, sensitive personal data, processing, consent, etc.

3. Types of Personal Data Collected: Detailed list of personal and sensitive personal data being collected

4. Purpose of Data Collection and Processing: Specific purposes for which the personal data will be collected and processed

5. Legal Basis for Processing: The legal grounds for processing personal data, including consent requirements

6. Data Storage and Security: Information about how data is stored, protected, and for how long it will be retained

7. Data Principal Rights: Rights of the individual regarding their personal data, including access, correction, and deletion

8. Data Sharing and Disclosure: Information about third parties with whom data may be shared and the purposes

9. Grievance Redressal: Contact details of the Grievance Officer and procedure for raising complaints

10. Consent Declaration: Explicit consent statement and signature section