DIGITAL PERSONAL DATA PROTECTION (DPDP)

If your business uses people’s data, DPDP may apply.Pramana helps you get organised.

A customer places an orderYou hire someoneSomeone asks for help

Names, phone numbers and messages can be personal data when kept digitally. India’s Digital Personal Data Protection (DPDP) Act recognises people’s right to protect it and the need to use it lawfully.

HOW PRAMANA HELPS YOUR TEAM

See where personal data goes. Bring the right people together. Keep a clear record of decisions and next steps.

14 short questions · see your notes before sharing details · print them here or request an email copy. This starts a discussion; it cannot tell you whether you follow the law.

The exact rules depend on what your business does. The law has exceptions, and different rules start on different dates.

PRAMANA · DPDP GOVERNANCE

Pramana helps your team make sense of DPDP work.

Pramana helps business, privacy, legal and technology teams talk through how personal data is used and keep useful notes on their decisions.

CONTEXT

See where data goes.

Look at what information you collect, why you use it, which teams and systems handle it, and whether other service providers are involved.

DECISIONS

Get the right people together.

Help business, privacy, legal, risk and technology teams see the same facts and discuss who is responsible and what remains unclear.

FOLLOW-UP

Keep track of decisions.

Keep a clear note of decisions and next steps so your team can review them later. The result depends on the information your team provides.

Pramana helps your team organise its work. It cannot say that you comply with the law, replace qualified legal advice or take away your team’s responsibility.

A simple way to begin: Write down how you use personal data → check the official law and when its rules start → ask the right people to decide open questions → keep a note of decisions and next steps. See the illustrative sequence →

DPDP BEYOND AI

DPDP can matter even if you do not use AI.

A website, customer list, hiring form, payment flow or help desk may involve digital personal data. The questions can include what you collect, how you use and share it, how long you keep it and when you delete it. This can involve ordinary apps and business systems as well as AI or agents.

  • Customer and service journeys
  • Workforce processes
  • Health and care services
  • Financial services and payment journeys
  • Education and enrolment
  • Support and grievance workflows
  • Service-provider relationships
  • Analytics, automation and AI

These are examples to help you start thinking. They do not mean the Act applies to every business or activity.

DPDP GUIDE · OFFICIAL SOURCES

Learn the basics before deciding what applies to your business.

Start with our plain-English guide. Then check the official Act, Rules, start-date notices and later government updates that matter to your situation.

Learn about DPDP
START A CONVERSATION

Talk with us about how Pramana could help your team.

Tell the Annapurna team what your business does and what questions you have.

Contact Annapurna