InfraVeritas360DPDPiqDPDP Insights › All sectors › Manufacturing
Sector
DPDP for manufacturing
Factories hold more personal data than most people think: large workforces and contract labour, gate passes, biometrics, medical checks, dealers and distributors, and in some industries, consumers and farmers.
Open the interactive tool for this sectorThis sector is in its core view. The law, guides and seat notes apply in full; the sector pack with role briefs and worked examples is being written.
Types of organisation
- Chemicals and petrochemicalsChemical plants keep health surveillance records for workers in hazardous processes, emergency contact lists, driver records for hazardous goods transport, and sometimes lists of nearby residents for emergency plans.
- FertilisersSubsidised fertiliser is sold to farmers through Aadhaar-enabled PoS devices at retailers, and every sale is recorded in iFMS. Companies also run farmer meetings, soil testing and agronomy apps that collect farmer data.
- Automotive and auto componentsVehicle makers receive buyer data from dealers for warranty and recalls, and connected vehicles send location and driving data. Plants run large contract workforces.
- FMCG and consumer goodsContests, sampling and retailer loyalty apps bring in consumer and shopkeeper data, often through agencies.
- Steel, metals and miningPlants run townships, hospitals and schools, and very large contract workforces.
- Cement and building materialsMason and contractor loyalty schemes collect bank details for rewards; truck drivers' data flows through logistics partners.
- Textiles and apparelGlobal buyers' social audits review worker files, and hostels hold residents' details.
- Food processing and dairyProcurement apps record farmer names, bank accounts and supply; consumer complaints carry contact details.
Whose data you hold
- Employees and contract workers
- Dealers, distributors and retailers
- Consumers who register products or warranties
- Farmers and suppliers (some industries)
- Visitors, drivers and CCTV at plants
Rules that sit alongside DPDP
| Rule | What it says | What it means alongside DPDP | Source |
|---|---|---|---|
| Labour Codes (in force from 21 November 2025) | The four labour codes replaced older labour laws, including the Factories Act and the Contract Labour Act, with their own registers and records. | Set retention for worker and contract labour records against the codes and state rules. | Ministry of Labour |
| Fertiliser DBT and iFMS (Department of Fertilizers) | Farmers are authenticated through Aadhaar-enabled PoS devices at retail outlets; sales are captured in iFMS and form the basis of subsidy claims. | Retailer devices and company dashboards hold farmer identity and purchase data; limit who sees it. | Department of Fertilizers |
| CERT-In Directions, 2022 | Report specified cyber incidents within six hours; keep ICT logs 180 days within India. | Applies alongside the DPDP breach steps. | CERT-In |
Explore our research-built assessment platformsEach one comes out of the same InfraVeritas360 Foundation Layer research. Human-led, with no AI used.