(1) Every request for consent under the provisions of this Act or the rules made thereunder shall be presented to the Data Principal in a clear and plain language, giving her the option to access such request in English or any language specified in the Eighth Schedule to the Constitution and providing the contact details of a Data Protection Officer, where applicable, or of any other person authorised by the Data Fiduciary to respond to any communication from the Data Principal for the purpose of exercise of her rights under the provisions of this Act.
(2) The Data Fiduciary shall, as soon as it is reasonably practicable, give to the Data Principal a notice informing her,—
- the personal data and the purpose for which the same is proposed to be processed;
- the manner in which she may exercise her rights under sub-section (4) of section 6 and section 13; and
- the manner in which the Data Principal may make a complaint to the Board.
(3) The Data Fiduciary shall give the Data Principal the option to access the contents of the notice referred to in sub-sections (1) and (2) in English or any language specified in the Eighth Schedule to the Constitution.
(4) The notice referred to in sub-sections (1) and (2) shall be given in respect of personal data processed before the date of commencement of this Act where the Data Principal has given her consent before such date and the processing of such personal data is ongoing on the date of such commencement.