Consent

    Is having a privacy policy on our website enough to meet consent requirements?

    Short Answer

    No, a privacy policy informs users but does not capture consent. DPDP requires active user action like clicking a checkbox.

    Answer

    No, a privacy policy only informs users — it does not capture consent. DPDP requires active user action, such as clicking a checkbox or accepting a specific option.

    Businesses must design clear consent capture mechanisms, not rely on passive acceptance through terms.

    Law Reference

    Section 5 – Notice

    Section 6 – Consent

    Business Impact

    Many businesses wrongly assume a privacy policy page is sufficient. Active consent capture mechanisms must be implemented across all data collection points.

    Real-World Example

    A website with only a 'Privacy Policy' link in the footer must add explicit consent checkboxes on signup forms, contact forms, and data collection points.

    Was this answer helpful?

    Still have questions?

    Our team is here to help you with any questions about DPDP compliance.