In simple words
Before or when a company asks for consent, it must give a notice. The notice says what data it wants, why, how to withdraw consent or raise a grievance, and how to complain to the Board. If people consented before the Act started, the company must send them a notice as soon as reasonably practicable.
- What this means for you
- You should get a clear notice explaining what data is taken and why, before you agree.
- What this means for businesses
- Prepare a standalone, plain-language notice. Rule 3 lists what it must contain.
- Everyday example
- When you sign up on a food delivery app, a short screen lists your name, phone and address and says they are used to deliver your orders.
सरल शब्दों में (हिन्दी अनुवाद)
सहमति माँगने से पहले या उसी समय कंपनी को एक सूचना (नोटिस) देनी होगी। सूचना में बताया जाता है कि कौन सा डेटा चाहिए, क्यों चाहिए, सहमति कैसे वापस लें या शिकायत कैसे करें, और बोर्ड से शिकायत कैसे करें। अगर लोगों ने कानून शुरू होने से पहले सहमति दी थी, तो कंपनी को जितनी जल्दी व्यावहारिक रूप से संभव हो, उन्हें सूचना भेजनी होगी।
- आपके लिए इसका मतलब
- सहमति देने से पहले आपको एक साफ़ सूचना मिलनी चाहिए कि कौन सा डेटा लिया जा रहा है और क्यों।
- कारोबार के लिए इसका मतलब
- एक अलग, सरल भाषा वाली सूचना तैयार करें। नियम 3 बताता है कि उसमें क्या होना चाहिए।
- रोज़मर्रा का उदाहरण
- फ़ूड डिलीवरी ऐप पर साइन अप करते समय एक छोटी स्क्रीन बताती है कि आपका नाम, फ़ोन और पता आपके ऑर्डर पहुँचाने के लिए इस्तेमाल होंगे।
This is our Hindi translation of the plain English summary above, not the official Hindi text of the Act. If they differ, the official text prevails.
Who it applies to
Data Fiduciaries asking for consent.
Related Rules
- Rule 3. Notice given by Data Fiduciary to Data Principal From 13 May 2027
Related sections
Official textas notified
Source: MeitY copy of the Gazette (CG-DL-E-12082023-248045), page 4. Printed dashes are shown as colons; the wording is unchanged.
(1) Every request made to a Data Principal under section 6 for consent shall be accompanied or preceded by a notice given by the Data Fiduciary to the Data Principal, informing her,
(i) the personal data and the purpose for which the same is proposed to be processed;
(ii) the manner in which she may exercise her rights under sub-section (4) of section 6 and section 13; and
(iii) the manner in which the Data Principal may make a complaint to the Board, in such manner and as may be prescribed.
Illustration.
X, an individual, opens a bank account using the mobile app or website of Y, a bank.
To complete the Know-Your-Customer requirements under law for opening of bank account, X opts for processing of her personal data by Y in a live, video-based customer identification process. Y shall accompany or precede the request for the personal data with notice to X, describing the personal data and the purpose of its processing.
(2) Where a Data Principal has given her consent for the processing of her personal data before the date of commencement of this Act,
(a) the Data Fiduciary shall, as soon as it is reasonably practicable, give to the Data Principal a notice informing her,
(i) the personal data and the purpose for which the same has been processed;
(ii) the manner in which she may exercise her rights under sub-section (4) of section 6 and section 13; and
(iii) the manner in which the Data Principal may make a complaint to the Board, in such manner and as may be prescribed.
(b) the Data Fiduciary may continue to process the personal data until and unless the Data Principal withdraws her consent.
Illustration.
X, an individual, gave her consent to the processing of her personal data for an online shopping app or website operated by Y, an e-commerce service provider, before the commencement of this Act. Upon commencement of the Act, Y shall, as soon as practicable, give through email, in-app notification or other effective method information to X, describing the personal data and the purpose of its processing.
(3) The Data Fiduciary shall give the Data Principal the option to access the contents of the notice referred to in sub-sections (1) and (2) in English or any language specified in the Eighth Schedule to the Constitution.