InfraVeritas360DPDPiqDPDP Insights › All sectors › Telecom and internet
Sector
DPDP for telecom and internet
Operators hold subscriber identity, call and data records, location and payment details for crores of people, under licence conditions and the Telecommunications Act, 2023.
Open the interactive tool for this sectorThis sector is in its core view. The law, guides and seat notes apply in full; the sector pack with role briefs and worked examples is being written.
Types of organisation
- Mobile network operatorsSIM issue and KYC happen at many retail points.
- Broadband, cloud and hostingCERT-In asks cloud, VPS and VPN providers to keep subscriber records for five years.
Whose data you hold
- Subscribers
- Retailers and distributors
- Employees
Rules that sit alongside DPDP
| Rule | What it says | What it means alongside DPDP | Source |
|---|---|---|---|
| Telecommunications Act, 2023 | Replaces the older telegraph laws for telecom services and authorisations. | Licence and authorisation conditions sit alongside DPDP. | DoT |
| TRAI Telecom Commercial Communications Customer Preference Regulations, 2018 | Rules for commercial calls and SMS. | Marketing needs both DPDP consent and TRAI compliance. | TRAI |
| CERT-In Directions, 2022 | Report specified cyber incidents within six hours; keep ICT logs 180 days within India. | Applies alongside the DPDP breach steps. | CERT-In |
Explore our research-built assessment platformsEach one comes out of the same InfraVeritas360 Foundation Layer research. Human-led, with no AI used.