A privacy policy is a general document on your website that explains your data practices. A consent notice is the specific explanation shown at the moment you ask for personal data, listing what you collect and why and how to withdraw consent. The DPDP Act focuses on the notice, so most organisations need both.
- The policy is general and always available; the notice is specific and timely.
- A notice must be clear, in plain language and easy to understand.
- Keep both consistent with what you actually do.
The difference at a glance
| Privacy policy | Consent notice | |
|---|---|---|
| Where | A page on your website or app | At the point of collection: form, booking page, message |
| Purpose | General description of practices | Specific explanation for this collection |
| Length | Can be detailed | Short, clear and plain |
| DPDP link | Supports transparency | Central to valid consent (sections 5 and 6) |
What a privacy policy should cover
- who you are and how to contact you
- what personal data you collect and from whom
- why you use it and who you share it with
- how long you keep it and how you protect it
- how individuals can exercise their rights and complain
What a consent notice should cover
Keep it short and specific. It should list the data, the purpose, how to withdraw consent, how to exercise rights and how to complain to the Board. See our full consent and notice guide.
Example: an enquiry form
Notice: “We will use your name, phone number and email only to reply to your enquiry. You can withdraw consent or ask us to delete your details at any time by contacting contact@example.com. See our privacy policy for details.”
Adapt the wording to your real practices and your own contact details.
Frequently asked questions
Can I copy a privacy policy template?
Templates are a starting point, but the policy must match what you actually do. Copying text that does not fit your practices can mislead people.
Does my privacy policy need to be in other languages?
The Act asks that the notice be accessible in English or any Eighth Schedule language. Consider offering Telugu, Hindi or Urdu where your audience needs it.
Sources
Reviewed 3 November 2026. This is general information, not legal advice. Dates and details can change, so check the official sources.