Legal Register
RULE-3 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Rule 3: Notice
Comparable ease is statutory; identical screens/steps are an optional heuristic.
Subordinate Trigger
Notice
Applies to: Data Fiduciary
Rule Prescriptions
Independent understandable clear/plain notice, itemised data, purposes and goods/services/uses description; withdrawal/rights/complaint links and other means.
Exceptions & Provisos
Read s5 and s6 language options.
Official Gazette Text (Verbatim Rules Publication)
Ministry of Electronics and Information Technology, Digital Personal Data Protection Rules, 2025.
3. Notice given by Data Fiduciary to Data Principal. —The notice given by the Data Fiduciary to the
Data Principal shall—
(a) be presented and be understandable independently of any other information that has been, is or may
be made available by such Data Fiduciary;
(b) give, in clear and plain language, a fair account of the details necessary to enable the Data Principal
to give specific and informed consent for the processing of her personal data, which shall include,
at the minimum, —
(i) an itemised description of such personal data; and
(ii) the specified purpose or purposes of, and specific description of the goods or services to be
provided or uses to be enabled by, such processing; and
(c) give, the particular communication link for accessing the website or app, or both, of such Data
Fiduciary, and a description of other means, if any, using which such Data Principal may—
[भाग II—खण्ड 3(i)] भारत का रािपत्र : असाधारण 25
(i) withdraw her consent, with the ease of doing so being comparable to that with which
such consent was given;
(ii) exercise her rights under the Act; and
(iii) make a complaint to the Board.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix implementing this subordinate rule.