What must a Section 5 Consent Notice contain?

Under Section 5(1), a consent notice must specify: 1) The exact personal data categories collected; 2) The specific processing purpose; 3) How the user may withdraw consent; and 4) How to contact the Grievance Redressal Officer.

Do I need to offer the privacy notice in regional Indian languages?

Yes. Section 5(3) mandates that Data Principals must have the option to view the notice in English or any of the 22 languages specified in the 8th Schedule of the Constitution of India.

How can I generate a compliant Section 5 notice for my website?

You can use the free Ronin Works Consent Notice Generator at roninworks.in/tools/notice-generator to generate itemized notice text.

DPDP Act Section 5 · Notice Requirements

Drafting a Compliant DPDP Section 5 Consent Notice: Items & Languages

Published 30 July 2026 · 5 min read · By Ronin Works Team

Short Answer

Section 5(1) of the DPDP Act 2023 mandates that every request for consent must be accompanied or preceded by an itemized notice. The notice must specify the personal data collected, specific processing purposes, consent withdrawal procedures under Section 6(4), and Grievance Officer details. Section 5(3) also requires offering the notice in any of the 22 8th Schedule languages. Generate plain-English notices using our Free Consent Notice Generator.

A generic "By signing up you agree to our Terms" checkbox is no longer valid in India. The Digital Personal Data Protection Act 2023 introduces strict requirements for Section 5 Privacy & Consent Notices.

1. The Four Core Items Required in Every Section 5 Notice

Itemized Data Categories: Explicitly state what data points are collected (e.g. Name, Phone, Location, Billing Details).
Specified Purposes: Clearly explain the exact processing purpose (e.g. Account creation, order fulfillment, GST invoicing).
Withdrawal Procedure: State how users can revoke consent as easily as giving it under Section 6(4).
Grievance Officer Contacts: Provide email and helpline details for your Grievance Officer under Section 8(10).

Cross-Platform Consent: Ronin Works ↔ Saaph.in

Consumer privacy platforms like Saaph.in allow users to inspect whether companies obtain valid Section 5 consent before processing their personal data.

Using our Free Consent Notice Generator ensures your signup forms display legally valid notices before data collection takes place.

Generate Notice Free → Scan Your Website →

Legal Disclaimer: This guide provides administrative information regarding Section 5 of the DPDP Act 2023. It does not constitute legal counsel.

B2B Consent Management

Need an Automated DPDP Consent Platform?

Ronin Works builds automated consent management platforms that log proof of consent, manage 22-language notices, and process withdrawal requests.