We collect customer data through our website forms, CRM, and WhatsApp campaigns — does DPDP apply to all these touchpoints or only specific systems? DPDP applies to every touchpoint where personal data is collected or processed, including websites, CRM tools, apps, WhatsApp, and even offline data that gets digitized later.
Read more As a brand using CRM, loyalty platforms, and marketing tools, who is responsible if there is a compliance failure? Your organization is the Data Fiduciary, meaning you are responsible for determining how and why data is used. Even if vendors process data, the liability remains with you.
Read more We have historical customer data collected over many years — can we continue using it for campaigns? Yes, but only if the data aligns with DPDP requirements. You must ensure users are informed about usage and given control (like withdrawal options).
Read more Does DPDP apply only to paying customers, or also to leads and employees? DPDP applies to all individuals whose data you process, including customers, leads, employees, and even website visitors.
Read more What type of data in our business is considered personal data under DPDP? Any data that can identify an individual directly or indirectly is considered personal data. This includes basic details like name and phone number, as well as behavioral or transactional data.
Read more What is the DPDP Act? The DPDP Act, 2023 is India's primary data protection law, enacted on 11 August 2023 and being operationalised through phased rules and the Data Protection Board. It applies to any business — Indian or foreign — that processes the digital personal data of individuals in India.
Read more Does the DPDP Act apply to retail businesses? The DPDP Act applies to all retail businesses collecting digital personal data including loyalty programs, billing systems, CRM databases, e-commerce platforms, and marketing communications. If your business collects any form of digital personal data from customers, you are a Data Fiduciary and must comply with the Act.
Read more What retail customer data is protected under DPDP? Any personally identifiable customer data such as name, phone number, email, purchase history, loyalty data, and digital identifiers is protected. This includes data collected through POS systems, apps, websites, WhatsApp, and other digital channels.
Read more