Sectoral Compliance.

Q: Does DPDPA apply to IT companies?

Yes, DPDPA applies to all IT companies processing digital personal data in India, including software companies, IT services, SaaS providers, and tech startups. IT companies typically handle significant volumes of employee and customer data.

Q: What are fintech-specific DPDPA requirements?

Fintech companies must comply with DPDPA plus RBI data localisation requirements for payment data. They face heightened obligations due to sensitive financial data processing and may be designated as SDFs.

Q: How does DPDPA affect healthcare data?

Healthcare organizations handling patient data must implement enhanced security measures. While DPDPA doesn't have a separate health data category, processing medical records requires robust consent and security frameworks.

Sector-specific application of the Digital Personal Data Protection Act, 2023. Mapping horizontal privacy mandates against vertical regulatory requirements.

Regulated Industries

Total Sectors: 2

View Dossier

BFSI & Digital Finance

Strict localization of payment credentials and biometric KYC privacy mandates.

Primary Instruments

RBI Payment Data Circular

DPDPA 2023

View Dossier

Health Records & Genomics

Governance of sensitive medical artifacts under the ABDM federated privacy architecture.

Primary Instruments

ABDM Health Data Policy

DPDP Rules 2025