Short Answer
No, data collected for one purpose cannot be reused for marketing without obtaining fresh, specific consent.
No, data can only be used for the purpose it was originally collected for. Any new purpose requires fresh consent.
This means your systems must track purpose mapping clearly, otherwise reuse becomes a compliance risk.
Law Reference
Section 5 – Notice
Section 6 – Consent
Systems must implement purpose-tracking to prevent unauthorized data reuse. Marketing teams cannot assume signup data grants campaign access.
A SaaS company collects email during product signup. To send promotional newsletters, they must obtain separate marketing consent from those users.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.