Applicability
Does DPDP apply to B2B SaaS companies?
Usually yes, in 2 roles at once. For your own users you are a Data Fiduciary with the full duty set. For customer data you are a Data Processor, and the framework never addresses you by that name.
Tag
Articles tagged Applicability
3 articles on this site carry this tag. Open any of them for the source documents behind their legal claims, with a claim type label on every source.
Applicability
Does DPDP apply to foreign companies?
Section 3(b), not in force yet, reaches processing outside India in connection with any activity related to offering goods or services to people in India. The Act creates no local presence duty beyond the India based Data Protection Officer of a notified Significant Data Fiduciary, and section 37 blocking, in the same 18 month group, is the route against a company with no Indian assets.
Applicability
Does the DPDP Act apply to startups? No size test, and 3 places size counts
Section 3 carries no turnover, headcount or user threshold, so a 2 person company is inside the Act once section 3 commences on a computed 13 May 2027. That date is interpretation until officially confirmed. Size still decides which duties bite, in 3 named places, and section 17(3) names startups without exempting a single one.
The provisions these articles point to
Each page carries the official text of the provision, its commencement status and the sources behind it.
- Section 3: Application of Act
- Section 8: General obligations of Data Fiduciary
- Section 37: Power of Central Government to issue directions
Tools for this topic
Free, no login, and each one shows the provisions its answers rest on.