Industries

DPDP compliance, sector by sector

The Act is the same for everyone, but each sector feels it differently. Pick yours to see the duties that matter most.

EdTech and schoolsUnder the Act anyone under 18 is a child. For an EdTech business that is most of the people it serves, so the extra duties for children's data apply to almost everything it does.
Banking, financial services and insuranceFinancial firms hold the most sensitive identifiers there are, under sector rules that already demand a lot. The DPDP Act adds its own duties on top, and the largest firms may be notified as Significant Data Fiduciaries.
HealthcarePatient records are among the most sensitive data a business can hold. The Act lets you act in an emergency without waiting for consent, but expects strong safeguards around everything else.
SaaS and IT servicesA SaaS company is usually two things at once: a processor for its customers' data, and a Data Fiduciary for its own users, staff and leads. Customers will ask how you handle both.
E-commerce and retailOnline stores collect personal data at every step, from sign-up to delivery. The Rules set a specific erasure timetable for large platforms, and marketing is where consent most often goes wrong.