A notice under the DPDP Act must be made available in English or in any language listed in the Eighth Schedule to the Constitution of India. In practice that means a Data Principal must be able to read the notice in a language they understand, which for much of India is not English.
This is the requirement most often deferred and least often defensible. A consent record is only as strong as the notice it was given against, so an English-only notice shown to a customer base that does not read English weakens every consent taken through it.
The operational fix is to bind each consent record to the version and language of the notice displayed, so you can demonstrate what the person actually saw rather than what was available somewhere on the site.
General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.
Priya Gupta — Priya writes on compliance operations at ProtectComply, including data principal rights, grievance handling and sector-specific programmes.
Take the free readiness check and find out in 10 minutes.
Start free readiness check →