Section 5(1) in THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023
(1)Every request made to a Data Principal under section 6 for consent shall be accompanied or preceded by a notice given by the Data Fiduciary to the Data Principal, informing her,—(i)the personal data and the purpose for which the same is proposed to be processed;(ii)the manner in which she may exercise her rights under sub-section (4) of section 6 and section 13; and(iii)the manner in which the Data Principal may make a complaint to the Board, in such manner and as may be prescribed.Illustration.X, an individual, opens a bank account using the mobile app or website of Y, a bank.To complete the Know-Your-Customer requirements under law for opening of bank account, X opts for processing of her personal data by Y in a live, video-based customer identification process. Y shall accompany or precede the request for the personal data with notice to X, describing the personal data and the purpose of its processing.
