SCENARIO S05 · NOTICE, PURPOSE & CONSENT
A public form enables optional analytics trackers before the visitor makes a choice. What is the safer design?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Keep optional tracking off, identify its purpose, and present it separately from the form’s service purpose.
Separate the implementation recommendation from the legal conclusion. A tracker inventory and purpose decision make the later analysis reviewable.
WHY THE OTHER INSTINCTS MISS
Keep optional tracking off, identify its purpose, and present it separately from the form’s service purpose.
Correct as a privacy-by-design implementation. The DPDP text does not create a tracker-specific switch rule, so the facts and processing basis still need analysis.
Treat all analytics as necessary because the form is public.
Public availability of a form does not automatically make optional tracking necessary for the submitted purpose.
Hide the tracker list in developer documentation.
Internal documentation does not give the visitor a clear choice or resolve the purpose question.
BUILD THIS EVIDENCE
Tracker inventory, purpose/basis decision and test showing optional trackers remain off until chosen.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- implementation indicator
- Pinpoint
- Act ss. 4–6; Rule 3; G.S.R. 843(E) and 846(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDigital Personal Data Protection Rules, 2025 (G.S.R. 846(E)) ↗
Final Rules with phased commencement. Scenario pinpoints identify the particular Rule being taught.
Rule 1(2)–(4), read with the corrigendumDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)