DPDP Insights › The law › Section 8(3)
If personal data is used to make a decision about a person, or is shared with another Data Fiduciary, reasonable care must be taken that it is complete, accurate and consistent.
Official text: Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 (MeitY). The DPDP Rules were notified on 13 November 2025. Consent Manager rules start on 13 November 2026. Most duties, including notice, security, breach reporting, retention, children's data and rights, start on 13 May 2027. A proposal discussed in early 2026 to bring this date forward had not been notified when this page was last reviewed.