Yes, for most entities operating online in India, both are mandatory. A Privacy Policy is explicitly required for “data fiduciaries” (those processing digital personal data) under the Digital Personal Data Protection Act, 2023, and for “body corporates” handling sensitive personal data under earlier IT Rules. Similarly, Terms & Conditions (user agreement) are mandated for “intermediaries” (which include many websites, apps, and online platforms) under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Even for businesses not affected by these requirements, having both is crucial for legal protection, defining user responsibilities, and managing legal liabilities in the long-term.
We Are Problem Solvers. And Take Accountability.
Related Posts
Trademark Objection Reply & Opposition: TM-O Drafting, Hearing, Timelines
A trademark objection reply is the formal, deadline-bound response an applicant files when the Trade Marks Registry or a third...
Learn More
BIS Certification & CRS Registration for Importers and D2C Brands
BIS certification is the umbrella term for the licences and registrations issued by the Bureau of Indian Standards (BIS) before...
Learn More
NBFC-MFI Licence in India: Qualifying Assets and RBI Norms
A Non-Banking Financial Company-Microfinance Institution (NBFC-MFI) is a distinct RBI-regulated lending category built around collateral-free credit to low-income households. It...
Learn More