Notice Orchestration
The Notice Orchestration Module (NOM) provides a standardized, accessible, and auditable way to generate and manage notices under the Digital Personal Data Protection Act (DPDPA), 2023. It ensures Data Principals are informed about data processing activities, fulfilling the Act’s transparency obligations.
1. Objectives
- Deliver clear, multilingual notices aligned with DPDPA requirements.
- Ensure WCAG 2.1 Level AA accessibility for inclusivity.
- Maintain audit trails of when and how notices were presented.
- Integrate seamlessly with the Consent Governance Module.
2. DPDPA-Compliant Notice Elements
According to Section 5 of the DPDPA, a valid notice must:
- Describe the personal data being collected or processed.
- Specify the purpose of processing.
- Explain Data Principal rights (access, correction, erasure, grievance).
- Provide grievance redressal contact details (DPO or equivalent).
- Offer language options (English + any Eighth Schedule languages).
- Be available before or at the time of consent collection.
- Include instructions for withdrawal of consent.
3. WCAG 2.1 Accessibility Requirements
| Principle | Requirement |
|---|---|
| Perceivable | Text alternatives for non-text content, sufficient color contrast, scalable fonts, captions for multimedia. |
| Operable | Keyboard navigability, focus indicators, timeouts adjustable, no flashing content. |
| Understandable | Plain language, consistent navigation, clear error identification. |
| Robust | Compatibility with assistive technologies (screen readers, ARIA labels). |
4. Core Features
| Feature | Description |
|---|---|
| Dynamic Notice Templates | Create and store notice templates by purpose, data element, or regulatory region. |
| Multilingual Support | Render notices in English and Eighth Schedule languages. |
| Adaptive Delivery | Display notices across channels (web, mobile apps, kiosks, email, SMS). |
| Accessibility by Design | Use WCAG-compliant UI elements, ARIA attributes, and high-contrast themes. |
| Version Control | Track notice updates, versions, and publication dates. |
| Audit Trails | Log when, where, and how notices were presented and acknowledged. |
| APIs & Webhooks | Push notice events to Consent Governance or external systems. |