A fundamental pillar of data protection and privacy is ‘transparency’. To ensure transparency of their data processing practices, organisations should inform their customers and users about how their personal data will be collected and used to provide them access to digital products and services. Transparency about how businesses handle personal data also ensures that users are able to provide meaningful consent and exercise genuine control over their personal data.
With the enactment of the Digital Personal Data Protection Act, 2023 (DPDPA) in India, the requirement for a privacy notice and request for consent has been formalized under the law. Upon the enforcement of the DPDPA, this requirement will become a legal compliance expected of businesses in the public and private sectors.
To facilitate compliance with this requirement, and as a foundational step towards improving privacy awareness and maturity of businesses, DSCI and Privy by IDfy have collaborated on developing (PriView- A comprehensive privacy notice generator). The tool is intended to provide a free -of-cost, accessible, intuitive, and self-guided starter kit to help you create a customized reference template for your business or organisation’s privacy notice in a few simple steps.
The tool can be used by privacy professionals, data protection officers, CTOs, CISOs, etc. in any organization or business seeking to create a privacy notice informing their users or customers about the purposes for which they process personal data and the kind of personal data they collect. In particular organisations that are starting out on their data protection compliance journey in India would benefit from referring to the notice generated by the tool as a base template which can be amended as needed. This could include:
Startups
MSMEs
Public sector undertakings
Other digital native businesses
The tool provides two channels for creation of your organisation’s customized privacy notice
If your organization does not currently have a comprehensive privacy policy, you can create your privacy notice in a few simple steps with this option. The user can manually select the applicable industry sector and the corresponding purposes relevant to the digital product/service/journey for which the notice is intended. The tool will then create an editable privacy notice based on the data input by the user.
If your organization already has a comprehensive privacy policy, you can create a digital product/service/journey specific notice using this option. Upon selecting the relevant industry sector and uploading the existing privacy policy of your organization, the algorithms underpinning the tool analyze your existing privacy policy to extract data processing activities and identify personal data collected to generate a customised and editable notice.
To download the PriView Information Guide and to know how it works click here
Disclaimer:-Please note that clicking on the link above to use the privacy notice generator tool will redirect you to IDfy’s website and digital platform. DSCI is not liable for the technical maintenance and functioning of the tool. DSCI also does not process or store any data that is input on the tool for creation of the notice. This tool is for general informative and awareness purposes to facilitate foundational steps towards good privacy practices. It is not intended to guarantee legal compliance to the DPDPA or other applicable laws. This tool should not be relied upon as a substitute for specific legal or other professional advice. Legal advice should always be sought before taking any action based on the information provided. It is the responsibility of the user of this tool to ensure proper vetting of the notice generated before utilising the same for their digital products and services. This tool is currently in its first iteration and will undergo continuous improvement based on feedback and internal assessment.