SCENARIO F02 · NOTICE, PURPOSE & CONSENT
A notice hides the personal-data items and purposes inside a long generic privacy policy. What should change?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Present an independently understandable notice with itemised data and specific purposes.
Treat the consent-facing notice as its own reviewable communication. A general policy may provide wider context, but it should not hide the specific decision.
WHY THE OTHER INSTINCTS MISS
Present an independently understandable notice with itemised data and specific purposes.
Correct. Act section 5 supplies the notice duty; future Rule 3 adds the independently understandable, itemised detail.
Add a link to the same policy beside the submit button.
A link alone does not fix missing itemisation or purpose-specific information.
Shorten the policy without checking what the consent request actually says.
Length is not the only issue. The notice still needs the required content and connection to the actual choice.
BUILD THIS EVIDENCE
Notice inventory with data items, purposes, rights link, language review and version history.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- legal requirement
- Pinpoint
- Act s. 5; Rule 3(a)–(c); G.S.R. 843(E) and 846(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDigital Personal Data Protection Rules, 2025 (G.S.R. 846(E)) ↗
Final Rules with phased commencement. Scenario pinpoints identify the particular Rule being taught.
Rule 1(2)–(4), read with the corrigendumDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)