An uncomfortable experiment: open any app you installed this year and try to answer three questions from what it showed you at sign-up — exactly what personal data did it collect, for exactly what purposes, and where precisely would you complain if it misused that data? You agreed to something; you just couldn't say what. That experience is precisely what Section 5 exists to end.

This episode covers the only compliance artefact every customer personally encounters. The statutory core: notice accompanying or preceding every consent request — never disclosure as an afterthought to a granted permission. The three mandatory contents, sharpened by Rule 3: an itemised description of the data ("we collect your information" fails; "name, mobile number, delivery address, order history" passes), itemised and specific purposes, and the accountability machinery — including the requirement that startles first-time readers: telling your own customers how to escalate against you to the Data Protection Board, the statute recruiting every notice in the country as civic education.

Then the distinctly Indian layer: availability across English and the twenty-two Eighth Schedule languages, and why your notice programme is a translation programme — professional translation of one short document, not machine translation of a sprawling policy. The Rule 3 standalone standard that ends the buried-privacy-policy era. The look-back obligation almost nobody has planned for: existing users, with consents collected under the old regime, must receive the new-style notice too. The five drafting failures I see weekly — the genre notice, the kitchen-sink purpose, the buried notice, the frozen notice, and the GDPR-template notice missing the complaints machinery entirely. What good looks like: the layered design. And the closing reframe: the notice as the one moment your data practices speak directly to a customer — compliance spend converting to brand equity for companies that treat it as craft.

DPDP Daily takes India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 out of the statute book and into real life — for compliance officers, lawyers, founders, small business owners and citizens. One practical episode every day, no jargon.

I'm Harmeet Singh Kapoor, author of the DPDP Act Compliance Handbook: From Law to Ground Reality.

Keywords: Section 5 DPDP, privacy notice, DPDP notice requirements, Rule 3, itemised notice, Eighth Schedule languages, plain language notice, notice drafting, consent notice India, DPDP compliance.

Connect with me:
💼 LinkedIn: https://www.linkedin.com/in/hskapoor/
📄 Facebook: https://www.facebook.com/satarkintelligence
▶️ YouTube: https://www.youtube.com/@DPDPdaily
🎙️ Apple Podcasts: https://podcasts.apple.com/us/podcast/dpdp-daily/id6793257111
𝕏 X: https://x.com/TheOtherKapoor

One practical DPDP insight every morning on LinkedIn, Facebook and X — and the DPDP Act Compliance Handbook: From Law to Ground Reality coming soon.

This episode is educational commentary, not legal advice. The DPDP framework is in phased implementation and positions described may evolve through notifications, Board publications and judicial interpretation. For decisions affecting your organisation or your rights, consult a qualified professional with your specific facts.