Industry guide
DPDP for Startups
Nothing in the rules on file gives small companies an automatic carve out. What startups get is time: the main operational duties arrive with lead time, which rewards building the plan early.
How to read this page. The obligations belong to your organisation, not to a role or a sector. Everything here is practical emphasis: which official duties this audience usually leads or feeds into, with links to the official text. Finishing one function's work never makes the company compliant by itself.
Where the framework usually bites first
Applicability firstSection 3, official text →
Most Indian startups processing user data digitally will be in scope; settle that question once with a traceable answer.
Security floorRule 6, official text →
The minimum safeguards list is the cheapest to build while the product is young.
Retention from day oneRule 8, official text →
Erasure timers and log retention are far easier to design in than to retrofit.