Free tool, no signup

Consent Notice Generator

Build the notice Rule 3 of the DPDP Rules 2025 asks for. Each item is checked as you type, with the rule it comes from.

Last reviewed 8 October 2026 against the DPDP Act 2023 and the DPDP Rules 2025

Business or app name (optional)

1. What personal data you collect

Rule 3(b)(i) asks for an itemised description, not a vague "we collect information".

2. Why you collect it, and what it gives the person

Rule 3(b)(ii) asks for each purpose and the goods, services or uses it enables.

3. Their choices, and who to ask

Rule 3(c) and Rule 9. Each link must lead somewhere that works.

Link to withdraw consentWithdrawing must be as easy as giving consent (Rule 3(c)(i)).Link to exercise rights (access, correction, erasure)Link to complain to the Data Protection BoardThe Board has not published a complaint portal yet. Add its link once it does.Contact personContact email

No page for withdrawing consent or making requests yet? Privacy Labs gives you a hosted privacy portal for both, with every request logged. See how

Preview

What personal data we collect

Contact details (for example: name, email address, phone number): used to create your account and to contact you
Payment details (for example: billing address, last four digits of your card): used to process your payments

Why we collect it, and what it gives you

To create and manage your account. This enables: access to your account and its features
To send you offers and updates you choose to receive. This enables: news about products, discounts and events

Your choices

Withdraw your consent at any time, as easily as you gave it:
Exercise your rights under the Act:
Complain to the Data Protection Board:
Questions about this processing: ()

4 things to fix before you publish

The notice must give a working absolute link to withdraw consent, as easily as it was given. (DPDP Rules 2025, Rule 3(c))
The notice must give a working absolute link to exercise rights under the Act. (DPDP Rules 2025, Rule 3(c))
The notice must give a working absolute link to make a complaint to the Board. (DPDP Rules 2025, Rule 3(c))
The notice must carry the business contact information of the person who can answer questions about the processing. (DPDP Rules 2025, Rule 9)

A notice is a promise your systems have to keep

Every link in the notice has to work: a way to withdraw consent as easily as it was given, a way to ask for access, correction or erasure, and a person who answers. And the notice has to change whenever your purposes do, with each version kept as evidence.

Privacy Labs builds the notice from your live consent settings, versions it, translates it, hosts the withdraw and request pages, and records every consent you collect.

Book a demo

Common questions

What must a DPDP consent notice contain?

Under Rule 3, an itemised description of the personal data, each specified purpose with the goods, services or uses it enables, and links through which the person can withdraw consent, exercise her rights and complain to the Data Protection Board. It must be understandable on its own, without reading anything else.

Is a privacy policy the same as a consent notice?

No. A privacy policy describes everything you do with data. A Rule 3 notice is shown when you ask for consent and must stand on its own, so a notice that just links to the privacy policy does not meet Rule 3(a).

Does the notice need to be in Indian languages?

The Act requires you to offer the notice in English or any language in the Eighth Schedule of the Constitution, at the person's option. This free generator produces English only.

When do I need this notice?

Rule 3 applies from 13 May 2027. From then, every request for consent must come with a notice like this.

Is anything I type stored?

No. The notice is built in your browser and nothing is sent to our servers.

Want to know how your website looks to a regulator? Run the free DPDP scanner

See all free DPDP tools