Site map
Reviewed by InfraVeritas360 ResearchFirst published Last reviewed
Sources: DPDP Act, 2023 and DPDP Rules, 2025 (MeitY)
About this resource
- About DPDP Insights
- DPDP Insights
- DPDP by industry
- DPDP by role and department
- DPDP glossary
- DPDP questions
- DPDP templates by industry
- How we research and review
- The law, section by section
Industries and organisation types
- DPDP for Banking, financial services and insurance
- DPDP for Central government: ministries and departments
- DPDP for Healthcare and hospitals
- DPDP for IT, ITeS, BPO and GCC
- DPDP for Manufacturing
- DPDP for Ministry of Chemicals and Fertilizers and its departments
- DPDP for Ministry of Ports, Shipping and Waterways and its offices
- DPDP for Ministry of Road Transport and Highways and its offices
- DPDP for Public sector undertakings and utilities
- DPDP for a automotive and auto components
- DPDP for a bPO and contact centre
- DPDP for a broking, depository and wealth
- DPDP for a cement and building materials
- DPDP for a chemicals and petrochemicals
- DPDP for a citizen portals and DBT schemes
- DPDP for a co-operative bank (urban or rural)
- DPDP for a diagnostic labs and imaging
- DPDP for a electricity distribution (state discoms)
- DPDP for a fMCG and consumer goods
- DPDP for a fertilisers
- DPDP for a food processing and dairy
- DPDP for a global capability centre
- DPDP for a health-tech and telemedicine
- DPDP for a iT services and consulting
- DPDP for a insurance company (life, general or health)
- DPDP for a managed services, data centres and cloud
- DPDP for a multi-specialty hospital chain
- DPDP for a nBFC and digital lender
- DPDP for a oil and gas marketing
- DPDP for a other line ministries and departments
- DPDP for a payments and fintech
- DPDP for a pharmacy chain and e-pharmacy
- DPDP for a power generation and transmission
- DPDP for a regulators and statutory bodies
- DPDP for a saaS and software products
- DPDP for a scheduled commercial bank
- DPDP for a standalone hospital or nursing home
- DPDP for a state development corporations and boards
- DPDP for a steel, metals and mining
- DPDP for a steel, mining, defence production and heavy industry
- DPDP for a textiles and apparel
- DPDP for a transport undertakings (rail PSUs, metro, state road transport)
Roles and departments
- DPDP for the Administration department in BFSI
- DPDP for the Administration department in Central government
- DPDP for the Administration department in Healthcare
- DPDP for the Administration department in IT and ITeS
- DPDP for the Administration department in Manufacturing
- DPDP for the Administration department in PSUs and utilities
- DPDP for the Board director in PSUs and utilities
- DPDP for the Branch / business head in BFSI
- DPDP for the CEO / MD in BFSI
- DPDP for the CEO / MD in Healthcare
- DPDP for the CEO / MD in IT and ITeS
- DPDP for the CEO / MD in Manufacturing
- DPDP for the CFO / Finance head in BFSI
- DPDP for the CFO / Finance head in Healthcare
- DPDP for the CFO / Finance head in IT and ITeS
- DPDP for the CFO / Finance head in Manufacturing
- DPDP for the CFO / Finance head in PSUs and utilities
- DPDP for the CIO / IT head in BFSI
- DPDP for the CIO / IT head in Healthcare
- DPDP for the CIO / IT head in IT and ITeS
- DPDP for the CIO / IT head in Manufacturing
- DPDP for the CIO / IT head in PSUs and utilities
- DPDP for the CISO / Security head in BFSI
- DPDP for the CISO / Security head in Healthcare
- DPDP for the CISO / Security head in IT and ITeS
- DPDP for the CISO / Security head in Manufacturing
- DPDP for the CISO / Security head in PSUs and utilities
- DPDP for the CISO in Central government
- DPDP for the CMD / MD in PSUs and utilities
- DPDP for the CTO / Engineering head in BFSI
- DPDP for the CTO / Engineering head in Central government
- DPDP for the CTO / Engineering head in Healthcare
- DPDP for the CTO / Engineering head in IT and ITeS
- DPDP for the CTO / Engineering head in Manufacturing
- DPDP for the CTO / Engineering head in PSUs and utilities
- DPDP for the Chief compliance officer in BFSI
- DPDP for the Chief compliance officer in Central government
- DPDP for the Chief compliance officer in Healthcare
- DPDP for the Chief compliance officer in IT and ITeS
- DPDP for the Chief compliance officer in Manufacturing
- DPDP for the Chief compliance officer in PSUs and utilities
- DPDP for the Chief risk officer in BFSI
- DPDP for the Chief risk officer in Healthcare
- DPDP for the Chief risk officer in IT and ITeS
- DPDP for the Chief risk officer in Manufacturing
- DPDP for the Chief risk officer in PSUs and utilities
- DPDP for the Company secretary in BFSI
- DPDP for the Company secretary in Healthcare
- DPDP for the Company secretary in IT and ITeS
- DPDP for the Company secretary in Manufacturing
- DPDP for the Company secretary in PSUs and utilities
- DPDP for the Coordination / board secretariat in Central government
- DPDP for the Customer service department in BFSI
- DPDP for the Customer service department in Central government
- DPDP for the Customer service department in Healthcare
- DPDP for the Customer service department in IT and ITeS
- DPDP for the Customer service department in Manufacturing
- DPDP for the Customer service department in PSUs and utilities
- DPDP for the DPO / Privacy lead in BFSI
- DPDP for the DPO / Privacy lead in Healthcare
- DPDP for the DPO / Privacy lead in IT and ITeS
- DPDP for the DPO / Privacy lead in Manufacturing
- DPDP for the DPO / Privacy lead in PSUs and utilities
- DPDP for the Data and analytics department in BFSI
- DPDP for the Data and analytics department in Central government
- DPDP for the Data and analytics department in Healthcare
- DPDP for the Data and analytics department in IT and ITeS
- DPDP for the Data and analytics department in Manufacturing
- DPDP for the Data and analytics department in PSUs and utilities
- DPDP for the Data and analytics head in BFSI
- DPDP for the Data and analytics head in Central government
- DPDP for the Data and analytics head in Healthcare
- DPDP for the Data and analytics head in IT and ITeS
- DPDP for the Data and analytics head in Manufacturing
- DPDP for the Data and analytics head in PSUs and utilities
- DPDP for the Data protection nodal officer in Central government
- DPDP for the Delivery head in IT and ITeS
- DPDP for the Director in BFSI
- DPDP for the Director in Healthcare
- DPDP for the Director in IT and ITeS
- DPDP for the Director in Manufacturing
- DPDP for the Establishment and administration in Central government
- DPDP for the Facilities and physical security department in BFSI
- DPDP for the Facilities and physical security department in Central government
- DPDP for the Facilities and physical security department in Healthcare
- DPDP for the Facilities and physical security department in IT and ITeS
- DPDP for the Facilities and physical security department in Manufacturing
- DPDP for the Facilities and physical security department in PSUs and utilities
- DPDP for the Finance and accounts (FA) in Central government
- DPDP for the Finance department in BFSI
- DPDP for the Finance department in Central government
- DPDP for the Finance department in Healthcare
- DPDP for the Finance department in IT and ITeS
- DPDP for the Finance department in Manufacturing
- DPDP for the Finance department in PSUs and utilities
- DPDP for the HR department in BFSI
- DPDP for the HR department in Central government
- DPDP for the HR department in Healthcare
- DPDP for the HR department in IT and ITeS
- DPDP for the HR department in Manufacturing
- DPDP for the HR department in PSUs and utilities
- DPDP for the HR head in BFSI
- DPDP for the HR head in Healthcare
- DPDP for the HR head in IT and ITeS
- DPDP for the HR head in Manufacturing
- DPDP for the HR head in PSUs and utilities
- DPDP for the IT department in BFSI
- DPDP for the IT department in Central government
- DPDP for the IT department in Healthcare
- DPDP for the IT department in IT and ITeS
- DPDP for the IT department in Manufacturing
- DPDP for the IT department in PSUs and utilities
- DPDP for the IT head / NIC coordinator in Central government
- DPDP for the Information security / SOC department in BFSI
- DPDP for the Information security / SOC department in Central government
- DPDP for the Information security / SOC department in Healthcare
- DPDP for the Information security / SOC department in IT and ITeS
- DPDP for the Information security / SOC department in Manufacturing
- DPDP for the Information security / SOC department in PSUs and utilities
- DPDP for the Internal audit (IAW) in Central government
- DPDP for the Internal audit department in BFSI
- DPDP for the Internal audit department in Central government
- DPDP for the Internal audit department in Healthcare
- DPDP for the Internal audit department in IT and ITeS
- DPDP for the Internal audit department in Manufacturing
- DPDP for the Internal audit department in PSUs and utilities
- DPDP for the Internal audit head in BFSI
- DPDP for the Internal audit head in Healthcare
- DPDP for the Internal audit head in IT and ITeS
- DPDP for the Internal audit head in Manufacturing
- DPDP for the Internal audit head in PSUs and utilities
- DPDP for the Legal & compliance in BFSI
- DPDP for the Legal & compliance in Healthcare
- DPDP for the Legal & compliance in IT and ITeS
- DPDP for the Legal & compliance in Manufacturing
- DPDP for the Legal & compliance in PSUs and utilities
- DPDP for the Legal cell in Central government
- DPDP for the Legal department in BFSI
- DPDP for the Legal department in Central government
- DPDP for the Legal department in Healthcare
- DPDP for the Legal department in IT and ITeS
- DPDP for the Legal department in Manufacturing
- DPDP for the Legal department in PSUs and utilities
- DPDP for the Marketing department in BFSI
- DPDP for the Marketing department in Central government
- DPDP for the Marketing department in Healthcare
- DPDP for the Marketing department in IT and ITeS
- DPDP for the Marketing department in Manufacturing
- DPDP for the Marketing department in PSUs and utilities
- DPDP for the Marketing head (CMO) in BFSI
- DPDP for the Marketing head (CMO) in Central government
- DPDP for the Marketing head (CMO) in Healthcare
- DPDP for the Marketing head (CMO) in IT and ITeS
- DPDP for the Marketing head (CMO) in Manufacturing
- DPDP for the Marketing head (CMO) in PSUs and utilities
- DPDP for the Medical director in Healthcare
- DPDP for the Office head / Section officer in Central government
- DPDP for the Operations head in BFSI
- DPDP for the Operations head in Healthcare
- DPDP for the Operations head in IT and ITeS
- DPDP for the Operations head in Manufacturing
- DPDP for the Operations head in PSUs and utilities
- DPDP for the Oversight: AS / JS / board in Central government
- DPDP for the Plant head / factory manager in Manufacturing
- DPDP for the Procurement department in BFSI
- DPDP for the Procurement department in Central government
- DPDP for the Procurement department in Healthcare
- DPDP for the Procurement department in IT and ITeS
- DPDP for the Procurement department in Manufacturing
- DPDP for the Procurement department in PSUs and utilities
- DPDP for the Product head in BFSI
- DPDP for the Product head in Central government
- DPDP for the Product head in Healthcare
- DPDP for the Product head in IT and ITeS
- DPDP for the Product head in Manufacturing
- DPDP for the Product head in PSUs and utilities
- DPDP for the Records and archives department in BFSI
- DPDP for the Records and archives department in Central government
- DPDP for the Records and archives department in Healthcare
- DPDP for the Records and archives department in IT and ITeS
- DPDP for the Records and archives department in Manufacturing
- DPDP for the Records and archives department in PSUs and utilities
- DPDP for the Sales department in BFSI
- DPDP for the Sales department in Central government
- DPDP for the Sales department in Healthcare
- DPDP for the Sales department in IT and ITeS
- DPDP for the Sales department in Manufacturing
- DPDP for the Sales department in PSUs and utilities
- DPDP for the Scheme or programme head in Central government
- DPDP for the Secretary / Head of Department in Central government
- DPDP for the Software engineering department in BFSI
- DPDP for the Software engineering department in Central government
- DPDP for the Software engineering department in Healthcare
- DPDP for the Software engineering department in IT and ITeS
- DPDP for the Software engineering department in Manufacturing
- DPDP for the Software engineering department in PSUs and utilities
- DPDP for the Training and L&D department in BFSI
- DPDP for the Training and L&D department in Central government
- DPDP for the Training and L&D department in Healthcare
- DPDP for the Training and L&D department in IT and ITeS
- DPDP for the Training and L&D department in Manufacturing
- DPDP for the Training and L&D department in PSUs and utilities
- DPDP for the Unit, plant or region head in PSUs and utilities
- DPDP for the Vigilance and risk in Central government
Templates
- DPDP templates for Banking, financial services and insurance
- DPDP templates for Central government: ministries and departments
- DPDP templates for Healthcare and hospitals
- DPDP templates for IT, ITeS, BPO and GCC
- DPDP templates for Manufacturing
- DPDP templates for Public sector undertakings and utilities
Questions
- A client's data is involved in an incident. Who tells whom?
- Are contract and agency workers our responsibility?
- Are we a Data Fiduciary or a Data Processor?
- Can a policy show that a control actually works?
- Can management trust the DPDP position it is shown?
- Can personal data be stored or accessed outside India?
- Can we cross-sell insurance, cards or mutual funds to existing customers?
- Can we send offers to past customers and leads?
- Can we share data with states, banks or other ministries?
- Can we share patient records with insurers and TPAs?
- Can we use customer data for analytics and models?
- Can we use patient data for research, audits or case studies?
- Connected vehicles and product registration: what can we do with the data?
- Contract workers, gate passes and biometrics: who is responsible for their data?
- Could we be a Significant Data Fiduciary?
- Dealer, retailer, mason and mechanic loyalty programmes: what do we need?
- Do we need DPDP consent to treat a patient?
- Do we need a DPO?
- Do we need a Data Protection Impact Assessment?
- Do we need citizens' consent to run a scheme?
- Do we need consent for employee data?
- Do we process children's data, and what changes if we do?
- Does DPDP apply to data of foreign clients' customers?
- Does ISO 27001 or NIST CSF cover our DPDP duties?
- Does a security dashboard show privacy readiness?
- Does deletion have to reach backups and test copies?
- Emergency plans with contact lists shared with authorities: is that allowed?
- Farmer Aadhaar authentication at the retailer's PoS: who is responsible for what?
- How do we build privacy into a new product or system?
- How do we handle a privacy complaint within 90 days?
- How do we put DPDP into the risk register?
- How do we stop staff looking at records they do not need?
- How does the RTI amendment change replies about personal information?
- How long can we keep candidate data?
- How long can we keep personal data?
- How long must we keep KYC and transaction records, and what happens after?
- How long should we keep patient records?
- How much effort and time will it take to be ready by 13 May 2027?
- How should our people access client systems?
- How should scheme systems handle Aadhaar numbers?
- Imaging machines and lab analysers hold patient data. What do we do?
- Is our PSU 'the State' under DPDP, and what changes if it is?
- Must a ministry delete data when a citizen asks?
- One incident, many regulators: how do we meet every clock?
- Police, a court or a regulator asks for someone's data. What do we do?
- Someone asks us to delete their data. Must we?
- Someone asks what data we hold about them. What do we send?
- Someone withdraws consent. What has to stop, and how fast?
- Something has gone wrong. What happens in the first 72 hours?
- Staff share personal data on WhatsApp and personal email. What do we do?
- Townships, hospitals and schools run by the PSU: what applies?
- We are linked to ABDM. How does its consent fit with DPDP?
- What about CCTV, visitor registers and biometric attendance?
- What about call recordings and customer service screens?
- What about distributors, dealers and franchisees?
- What can collection agents do with borrower data?
- What can our lending or banking app collect from a phone?
- What do the Second Schedule standards ask of a scheme?
- What evidence should exist before management accepts that we are ready?
- What must a vendor contract say about personal data?
- What should our privacy notice say, and where must people see it?
- What should the board of directors ask management about DPDP?
- When do we need consent, and when can we rely on a legitimate use?
- Where does personal data live in our organisation?
- Which logs must we keep, for how long, and where?
- Which records need extra protection under other health laws?
- Who needs DPDP training, and what should it cover?
- Who owns accountability for personal data in practice?
- Who should be able to see personal data in our systems?
- Worker medical records in hazardous processes: who may see them and how long do we keep them?
The law
- Section 10 · Rule 13: Significant Data Fiduciaries
- Section 16 · Rule 15: Data going outside India
- Section 17(1)(d): Exemption for offshore client data
- Section 3: Who the Act covers
- Section 4: When you may process data
- Section 5 · Rule 3: Notice
- Section 6: Consent
- Section 7: Uses allowed without consent
- Section 8(1)–(2): Responsibility for vendors
- Section 8(3): Accuracy
- Section 8(5) · Rule 6: Security safeguards
- Section 8(6) · Rule 7: Telling people about a breach
- Section 8(7) · Rule 8: Erasure and retention
- Section 8(9)–(10) · Rules 9, 14: Contact person and complaints
- Section 9 · Rules 10, 12: Children's data
- Sections 11–14 · Rule 14: Rights of people
- Sections 18–26: The Data Protection Board