Try searching for "consent", "penalty", or check our Glossary.
Does the DPDP Act apply to you?
Answer a few quick questions to find out your compliance status.
1. Do you process digital personal data (or digitize offline personal data)?
2. Is this processing done entirely for personal or domestic purposes? (e.g., your personal address book)
3. Are you located in India?
4. Do you process this data in connection with offering goods or services to Data Principals within India?
🟢
Not Affected
If you do not process any digital personal data, the DPDP Act does not apply to you.
🟢
Exempt (Personal Use)
The DPDP Act does not apply to the processing of personal data by an individual for any personal or domestic purpose (Section 3(c)(i)).
🟢
Not Affected
As a foreign entity not offering goods or services to people in India, the extraterritorial applicability of the DPDP Act does not trigger for you.
🔴
The DPDP Act Applies to You
Because you process digital personal data in India for non-domestic purposes, you must comply with the DPDP Act 2023. You need to establish consent frameworks, purpose limitations, and grievance redressal mechanisms.
Even though you are located outside India, Section 3(b) applies to you because you process personal data in connection with offering goods or services to individuals within India.
