General

    We collect customer data through our website forms, CRM, and WhatsApp campaigns — does DPDP apply to all these touchpoints or only specific systems?

    Short Answer

    Yes, DPDP applies to all digital touchpoints where personal data is collected, including websites, CRM, apps, and WhatsApp.

    Answer

    DPDP applies to every touchpoint where personal data is collected or processed, including websites, CRM tools, apps, WhatsApp, and even offline data that gets digitized later.

    From a business perspective, you cannot treat channels differently — compliance must be consistent across your entire data ecosystem. This is where most companies fail due to fragmented systems.

    Law Reference

    Section 3 – Application of Act

    "This Act applies to digital personal data… collected in digital form or digitised subsequently."

    Business Impact

    Businesses must ensure uniform compliance across all channels. Fragmented systems create gaps that lead to non-compliance, penalties, and customer trust erosion.

    Real-World Example

    A retail brand collecting data via website forms, WhatsApp campaigns, and in-store POS must ensure consent is captured and managed consistently across all three channels.

    Was this answer helpful?

    Still have questions?

    Our team is here to help you with any questions about DPDP compliance.