SCENARIO C01 · NOTICE, PURPOSE & CONSENT
Marketing preferences are shared across email and WhatsApp without a clear purpose choice. What is the best next step?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Define the promotional purposes and give understandable choices that the systems can enforce.
Design the preference model around real purposes, then make channels clear enough for people and systems to follow consistently.
WHY THE OTHER INSTINCTS MISS
Define the promotional purposes and give understandable choices that the systems can enforce.
Correct as implementation. The Act speaks to specified purpose and valid consent; separate channel controls are useful where they reflect real purposes and expectations.
Create a single “contact me anywhere forever” toggle.
That wording is unlikely to express a specific, bounded purpose and creates poor withdrawal evidence.
Infer WhatsApp permission from an email newsletter sign-up.
A choice in one context should not silently expand into a different communication context.
BUILD THIS EVIDENCE
Purpose/channel matrix, preference event, suppression test and processor propagation record.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- implementation indicator
- Pinpoint
- Act ss. 5–6; Rule 3; G.S.R. 843(E) and 846(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDigital Personal Data Protection Rules, 2025 (G.S.R. 846(E)) ↗
Final Rules with phased commencement. Scenario pinpoints identify the particular Rule being taught.
Rule 1(2)–(4), read with the corrigendumDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)