DPDP-Compliant Privacy & ToS Update
Budget: ₹1,500 – ₹12,500 INR
Our current Privacy Policy and Terms of Service were written before India’s Digital Personal Data Protection (DPDP) Act came into force, so the language now falls short of statutory requirements. I need both documents reviewed end-to-end, mapped against the new Act, and redrafted so they are fully compliant while remaining clear to everyday users.
What the engagement covers
• Analyse my existing Policy and ToS, line by line, against every relevant section of the DPDP Act 2023.
• Flag gaps or outdated clauses and suggest practical fixes.
• Produce clean, ready-to-publish versions of each document, plus a marked-up copy showing all changes.
• Ensure that consent wording, user rights, retention limits, breach notification duties and grievance-redress mechanisms reflect the exact language and intent of the Act.
• Keep tone consistent with the rest of my site and avoid unnecessary legalese.
Acceptance criteria
1. Both documents explicitly reference the DPDP Act where required and remove superseded references to earlier legislation.
2. No provision contradicts Sections 3–30 of the Act (definitions, grounds for processing, data principal rights, duties of data fiduciaries, etc.).
3. Final text passes a plain-language test—anyone reading at a Grade 9 level should understand their rights and obligations.
4. Deliverables arrive in editable Word (or Google Doc) format plus a PDF for record keeping.
I will supply the current drafts as soon as we start. Let me know your estimated turnaround time and any clarifications you need before diving in.
What the engagement covers
• Analyse my existing Policy and ToS, line by line, against every relevant section of the DPDP Act 2023.
• Flag gaps or outdated clauses and suggest practical fixes.
• Produce clean, ready-to-publish versions of each document, plus a marked-up copy showing all changes.
• Ensure that consent wording, user rights, retention limits, breach notification duties and grievance-redress mechanisms reflect the exact language and intent of the Act.
• Keep tone consistent with the rest of my site and avoid unnecessary legalese.
Acceptance criteria
1. Both documents explicitly reference the DPDP Act where required and remove superseded references to earlier legislation.
2. No provision contradicts Sections 3–30 of the Act (definitions, grounds for processing, data principal rights, duties of data fiduciaries, etc.).
3. Final text passes a plain-language test—anyone reading at a Grade 9 level should understand their rights and obligations.
4. Deliverables arrive in editable Word (or Google Doc) format plus a PDF for record keeping.
I will supply the current drafts as soon as we start. Let me know your estimated turnaround time and any clarifications you need before diving in.