Applicability
DPDP Act for ecommerce businesses: checkout, retention and vendors
Apply the DPDP Act to checkout, fulfilment, returns, marketing and vendors, including the special retention rules for large ecommerce platforms.
The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed. What is in force today
Sources last verified on 28 October 2026. Methodology
Tag
6 articles on this site carry this tag. Open any of them for the source documents behind their legal claims, with a claim type label on every source.
Applicability
Apply the DPDP Act to checkout, fulfilment, returns, marketing and vendors, including the special retention rules for large ecommerce platforms.
Roles
As at 27 October 2026, section 2(k) is in force, while operative duties among 14 other Data Processor mentions are not. Those duties address Data Fiduciaries.
Vendors
DPDP's 2 express processor contract points are not in force; other clauses are recommendations. The 13 to 15 May 2027 range is interpretation.
Roles
One test decides it: who determines the purpose and means of the processing. The 8 engagements worked through, why one company holds both roles at once, what the test never asks, and why the Act says Fiduciary where other laws say controller.
Applicability
Main DPDP duties are not in force. Once they commence, a B2B SaaS can be a fiduciary when it sets purpose and means, or a processor on behalf of a customer.
Vendors
Not in force: section 8(2)'s contract condition and Rule 6(1)(f)'s safeguards term may start from 13 to 15 May 2027, interpretation until officially confirmed.
Each page carries the official text of the provision, its commencement status and the sources behind it.
Free, no login, and each one shows the provisions its answers rest on.