Does the DPDP Act apply to you?
Six yes/no questions, grounded in Sec. 3 of the Act. Not legal advice.
Do you process personal data in digital form (collected digitally, or collected on paper and later digitised)?
Sec. 3(a) — Act applies to digital personal data.
Is the processing carried out within the territory of India?
Sec. 3(a) — Within-territory processing is covered.
If outside India, do you offer goods or services to data principals located in India?
Sec. 3(b) — Extra-territorial application.
Is ALL of the processing purely personal or domestic (e.g. a contact list on your phone)?
Sec. 3(c)(i) — Excluded.
Is ALL of the personal data made publicly available by the principal themselves (or under a legal duty to publish)?
Sec. 3(c)(ii) — Excluded.
Do you knowingly process personal data of children (under 18) or persons with disabilities who have a lawful guardian?
Sec. 9 — Verifiable parental/guardian consent + no tracking, behavioural monitoring, or targeted advertising.