DPDP-Compliant Client Data Consent Notice for CA / Law Firms

CLIENT DATA CONSENT AND PRIVACY NOTICE (In accordance with the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025) Date: [DATE] To, [CLIENT_NAME] [CLIENT_ADDRESS] Dear [CLIENT_NAME], As part of our professional engagement, [FIRM_NAME] ("we", "us", "our") will collect, process, and store certain personal data about you. In accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025, we are required to inform you of the following before collecting your data. 1. DATA FIDUCIARY DETAILS Name: [FIRM_NAME] Address: [FIRM_ADDRESS] Contact for data-related queries: [DATA_CONTACT_EMAIL] 2. PERSONAL DATA COLLECTED We may collect the following categories of personal data: · Identity data: Name, PAN, Aadhaar number, passport number · Financial data: Income details, bank account numbers, investment details, tax filings · Contact data: Address, email, mobile number · Professional data: Business registration details, GST number, financial statements · Legal data: Documents, contracts, litigation-related information (if applicable) 3. PURPOSE OF PROCESSING Your personal data will be processed solely for the following purposes: · [PURPOSE_1 — e.g., Preparation and filing of income tax returns] · [PURPOSE_2 — e.g., Tax audit under Section 44AB / Section 63] · [PURPOSE_3 — e.g., GST compliance and filing] · [PURPOSE_4 — e.g., Legal advisory and document preparation] · Compliance with applicable laws and regulations · Communication relating to the engagement 4. LEGAL BASIS Processing is carried out on the basis of your consent (Section 6 of the DPDP Act) and/or to comply with applicable legal obligations. 5. DATA RETENTION Your personal data will be retained for a period of [RETENTION_PERIOD] years from the end of the engagement, or as required under applicable laws (e.g., Income Tax Act, Companies Act), whichever is longer. 6. YOUR RIGHTS AS A DATA PRINCIPAL Under the DPDP Act, you have the right to: · Access information about your personal data processed by us · Correct inaccurate or outdated personal data · Erase your personal data (subject to legal retention obligations) · Nominate a person to exercise rights on your behalf in the event of death or incapacity · Raise a grievance with our Grievance Officer · File a complaint with the Data Protection Board of India 7. DATA SECURITY We maintain appropriate technical and organisational measures to protect your personal data, including [SECURITY_MEASURES — e.g., 256-bit encryption, access controls, and secure storage]. 8. THIRD-PARTY DISCLOSURE Your personal data will not be shared with any third party except: (a) as required by applicable law; (b) with [LIST_OF_PROCESSORS — e.g., our tax software providers] who are bound by data processing agreements; or (c) with your explicit consent. 9. GRIEVANCE OFFICER For any queries or concerns about your personal data, please contact: [GRIEVANCE_OFFICER_NAME] Email: [GRIEVANCE_OFFICER_EMAIL] Phone: [GRIEVANCE_OFFICER_PHONE] 10. CONSENT By signing this notice, you consent to the collection, processing, and storage of your personal data as described above. Client Signature: ______________________________ Name: ______________________________ Date: ______________________________