InfraVeritas360DPDPiqDPDP Insights › All sectors › Professional and staffing services
Sector
DPDP for professional and staffing services
Staffing agencies, background verification firms and professional firms hold candidates', employees' and clients' data.
Open the interactive tool for this sectorThis sector is in its core view. The law, guides and seat notes apply in full; the sector pack with role briefs and worked examples is being written.
Types of organisation
- Staffing and recruitmentAgencies are both fiduciaries and processors for clients.
- Background verificationVerification reports are sensitive.
Whose data you hold
- Candidates
- Placed workers
- Clients' people
Rules that sit alongside DPDP
| Rule | What it says | What it means alongside DPDP | Source |
|---|---|---|---|
| Labour Codes (in force from 21 November 2025) | The four labour codes replaced older labour laws, including the Factories Act and the Contract Labour Act, with their own registers and records. | Set retention for worker and contract labour records against the codes and state rules. | Ministry of Labour |
| CERT-In Directions, 2022 | Report specified cyber incidents within six hours; keep ICT logs 180 days within India. | Applies alongside the DPDP breach steps. | CERT-In |
Explore our research-built assessment platformsEach one comes out of the same InfraVeritas360 Foundation Layer research. Human-led, with no AI used.