Short Answer
Yes, but only to government-approved countries and with appropriate safeguards in place.
Yes, cross-border data transfer is allowed, but only to countries approved by the government. You must also ensure that appropriate safeguards are in place.
Businesses working with global vendors need to carefully evaluate data flow and jurisdiction risks to remain compliant.
Law Reference
DPDP Cross-border transfer provisions
Global operations must map data flows across jurisdictions. Using vendors in non-approved countries requires alternative arrangements or data localization.
An Indian e-commerce company using a US-based email marketing tool must verify that the US is on the approved list and that the vendor has adequate security measures.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.