InfraVeritas360DPDPiqDPDP Insights › All sectors › State government and local bodies
Sector
DPDP for state government and local bodies
State departments, municipal bodies and panchayats deliver most citizen services. Section 7(b) and 7(c) allow processing for benefits, services and functions under law, with Rule 5 standards, and Section 17(4) lifts some erasure duties. Security, breach reporting, accuracy and grievances still apply.
Open the interactive tool for this sectorThis sector is in its core view. The law, guides and seat notes apply in full; the sector pack with role briefs and worked examples is being written.
Types of organisation
- State departmentsRevenue, police, health, education and welfare departments hold large citizen records.
- Municipal corporations and urban local bodiesProperty tax, water bills and CCTV from smart city projects.
- Panchayati raj institutionsPanchayats hold job cards, beneficiary lists and registers, often published on walls and portals.
Whose data you hold
- Citizens and beneficiaries
- Property and tax payers
- Officers and staff
- Applicants for permits and licences
Rules that sit alongside DPDP
| Rule | What it says | What it means alongside DPDP | Source |
|---|---|---|---|
| CERT-In Directions, 2022 | Report specified cyber incidents within six hours; keep ICT logs 180 days within India. | Applies alongside the DPDP breach steps. | CERT-In |
| RTI Act, Section 8(1)(j) as amended (13 November 2025) | Personal information is exempt from disclosure. | Brief PIOs on the new wording. | SFLC.in summary |
Explore our research-built assessment platformsEach one comes out of the same InfraVeritas360 Foundation Layer research. Human-led, with no AI used.