What is collected?
Identify data requested or generated at each step, and whether each field is needed.
PUBLIC-FACING SERVICE CHANNELS
Map the data journey around a kiosk or ATM.
A practical walkthrough for teams reviewing personal-data processing across self-service channels and the people who support them. The channel alone does not determine legal applicability.
Choose a channel
Presenter note: discuss the service journey, responsible parties, access, records and applicable official requirements. This illustration makes no legal finding.
Keep the review grounded
Consider the purpose and actual data flows, who determines each activity, who acts on another party’s instructions, the applicable commencement and any separate payment or sector rules.
Check official DPDP sources →Questions to map
Why is it used?
Record the purposes for each activity and the people accountable for them.
Who else is involved?
Consider service providers, recipients, platform operators and role allocation.
What else applies?
For a covered payment-system provider or Aadhaar-related service, check relevant official RBI or UIDAI instruments; the service label alone does not settle scope.
Keep regulatory layers separate
DPDP and sector-specific obligations arise from distinct instruments. A sector label or technology choice does not automatically resolve which instrument applies. Verify the specific source and facts.
Review official sources →