DPDP Insights › Questions › Is our PSU 'the State' under DPDP, and what changes if it is

Question · Public sector undertakings and utilities

Is our PSU 'the State' under DPDP, and what changes if it is?

Short answer: Possibly, for some activities; get a written legal view

The DPDP Act uses the Article 12 meaning of 'State'. Many PSUs have been treated as the State by courts, depending on how deeply the government controls them. If you are, Section 7(b) and 7(c) and Section 17(4) may apply to public functions, but not automatically to commercial customer-facing work. Write an activity-wise legal view and keep the State provisions narrow.

What the law says

Section 2(x) defines State by reference to Article 12. Sections 7(b), 7(c) and 17(4) apply to the State.

Section 7: Some uses need no consent: data a person gave voluntarily for a specified purpose, duties under law, medical emergencies involving a threat to life, health services during an epidemic, safety during a disaster, and purposes of employment.
Section 8(7) · Rule 8: Erase personal data when its purpose is over or consent is withdrawn, unless a law requires you to keep it, and have your processors erase it too. Rule 8(3) asks every Data Fiduciary to keep personal data, traffic data and logs for at least one year for purposes listed in the Rules.

Steps

List activities: public functions, schemes, commercial sales.
Get a legal view for each.
Apply full duties where unsure.
Record the view and get board approval.
Review if courts or MeitY clarify.

Evidence to keep

Legal note
Board approval

Common mistakes

Claiming State status for marketing
No written view
Assuming exemption from security

From each seat

DPO / Privacy lead: Apply the note in request replies.
CMD / MD: Approve and take it to the board.
Board director: Ask to see the note.
Legal & compliance: This note is yours to write.

What a good answer from management sounds like

“We have a board-approved note. Only narrow public functions rely on State provisions; everything else follows full duties.” Effort and time: Light · 3 to 6 weeks.