DPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalisedDPDP Act 2023 → enforcement live§8(6) + Rule 7(2): 72h breach reportMax penalty: ₹250 Cr22 scheduled languagesap-south-1 · MumbaiConsent Manager framework: pilotDPDP Rules: operationalised
[01]Notice builder

Draft your §5 notice. Export as PDF.

Pick your sector, brand voice and the data you actually collect. Watch a DPDP-compliant, itemised consent notice compose itself — every §5(1) requirement accounted for. Download as PDF or JSON, or share a link with your legal team. Nothing is saved on our side.

Sections covered
§5–§14
Languages
22
Export
PDF · JSON · Link
Cost
₹0
[01]Brand & identity
Accent
Logo (optional)
[02]Sector preset
[03]Legal basis
[04]Tone
[05]Notice format
[06]Language
[07]Purposes (3)
[08]Data collected (3)
[09]Retention · 24 months
1 mo24 mo84 mo
[10]Scope flags
Consent Manager
[11]Cookies
[12]Withdrawal channel
[13]Contacts
Live · 203 words · English · long
Your Company · v1.0
DPDP §5(1) · 2026-08-01
Your Company · Consent notice · v1.0 · Effective 2026-08-01

Your Company is asking for your consent. Here is what we collect, why, and for how long.

Language of this notice: English. Also available in 21 other scheduled languages on request.

1. Personal data we will process
   Name, Email, Phone

2. Specified purposes (§5(1)(i))
  01. Create & operate the account
  02. Provide the requested service
  03. Customer support & grievance handling

3. Retention
   We will retain your personal data for 24 month(s) from the last active use, or until you withdraw consent — whichever is earlier. After that, data is erased under §8(7).

4. Cross-border transfer
   All processing occurs within India (ap-south-1). No cross-border transfer.

7. Cookies & similar technologies
  · Necessary — session, security, load balancing (cannot be turned off)

Withdrawal of consent
  In-app settings: Settings → Privacy → Withdraw consent
  Withdrawing consent is as easy as giving it (§6(4)).

Your rights as a Data Principal
  • Access & confirmation (§11)  • Correction & erasure (§12)
  • Grievance redressal (§13)    • Nominate (§14)

Data Protection Officer: A. Sharma · dpo@yourcompany.in
Grievance Officer (§13): R. Iyer · grievance@yourcompany.in
Unresolved after the statutory window? Escalate to the Data Protection Board of India under §13(3).
  • §5(1)(i)
    Purposes itemised
  • §5(2)
    Data classes named
  • §8(7)
    Retention capped at 24 mo
  • §13
    Grievance officer: R. Iyer

This builder produces a working draft. Your General Counsel should sign off before you deploy to production — or book a 20-minute call and our compliance team will review it with you.

One page. Same SDK powering it.

The builder above ships as part of Crawlshark's notice engine — every string versioned, every consent event ledgered, every language translated by a lawyer. Five working days to go live.