Statutory text
Applies to processing of digital personal data within India, and outside India if the processing relates to offering goods or services to Data Principals in India. Does not apply to personal/domestic use or to data made publicly available by the principal or under a legal obligation.
Read on MeitY (Ministry of Electronics & IT)Plain-English commentary
Extra-territorial reach. Even India-targeting foreign businesses must comply. Onboarding wizard checks this for each tenant.
applicabilityextra-territorial
Modules that handle this section