Check if DPDP Act is Applicable to You
Answer the following questions to determine whether the Digital Personal Data Protection Act, 2023 applies to your data processing activities.
1. Data Processing
Are you or does your business process data or involve any data processing operations (collecting, storing, transmitting or doing anything with data)?
2. Personal Data
Is the data collected personal data?
Personal data is any data that can identify a person, such as:
- Name
- Mobile Number
- Address
- Profession (if other information is also collected)
- IP Addresses
- Metadata
3. Collected in India
- Is this data collected from within Indian territory, or
- Is the processing in connection with goods or services offered in India, or
- Is the processing related to any activity that is for goods or services offered in India?
4. Digital Data
Is the data collected digitally or collected physically and later digitised?
5. Public Data Exemption
- Is the data made public by the user or any person authorised to make it public?
- Is the data processed for personal or domestic purposes?
6. Processing Special Data Categories
Is the processed data related to children or persons with disability (PwD)?
7. Exempted Entities
Are you one of these?
- Clinical establishment
- Mental Health establishment
- Health professional
- Allied Health professional — associate, technician or technologist
- Child day care centre or creche
- Transporting children
Data Fiduciary Obligations
The DPDP Act is applicable. Standard Data Fiduciary obligations apply (first section).
View Data Fiduciary Obligations →Data Fiduciary Obligations Including Restrictions Are Applicable
The DPDP Act is applicable with additional restrictions for processing children's / PwD data. All obligations apply.
View All Obligations →