Yes, for most entities operating online in India, both are mandatory. A Privacy Policy is explicitly required for “data fiduciaries” (those processing digital personal data) under the Digital Personal Data Protection Act, 2023, and for “body corporates” handling sensitive personal data under earlier IT Rules. Similarly, Terms & Conditions (user agreement) are mandated for “intermediaries” (which include many websites, apps, and online platforms) under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Even for businesses not affected by these requirements, having both is crucial for legal protection, defining user responsibilities, and managing legal liabilities in the long-term.
We Are Problem Solvers. And Take Accountability.
Related Posts
RSU vs ESOP – The Complete India Guide for Founders, HR Leaders & Employees (2026)
India's startup ecosystem has entered a golden era and equity compensation sits at the heart of it. Whether you are...
Learn More
Succession Planning in Indian Family Businesses
Why 9 in 10 listed companies are family-controlled and why fewer than 2 in 3 have a plan to stay...
Learn More
How a Virtual CFO Gets Your Startup Series A Ready
From Messy Books to Term Sheet A deep-dive for seed-stage founders preparing for their first institutional raise. This report covers...
Learn More