Under India's DPDP Act, collecting personal data generally starts with consent — and consent starts with a clear notice. At a front desk, that notice is the short, plain statement a visitor sees before they hand over their details. Getting it right is both a legal foundation and a matter of basic respect.
What a good notice covers
- What personal data you are collecting (name, contact, photo, purpose of visit).
- Why — the specific purpose, such as managing and securing the visit.
- How long you will keep it, in general terms.
- Who to contact and how to exercise rights like access and erasure.
Plain language, at the right moment
A notice buried in legalese, or shown after data is collected, defeats the point. It should be readable, presented at the moment of collection, and specific to what actually happens — not a generic wall of text. See getting visitor consent right.
Common mistakes
- Bundling unrelated purposes into one blanket consent.
- Collecting more than the visit needs, then justifying it later.
- No clear way for a visitor to decline or to raise a grievance.
- A notice that never mentions retention or rights.
How Certopact supports it
Certopact captures consent with a clear notice at the point of collection, keeps data purpose-limited, and supports configurable retention — see the DPDP Act and visitor data. This is general information, not legal advice; have your own counsel review your specific notice and consent wording.