DPDP Consultants Privacyium Tech Pvt. Ltd. 4th floor, GM IT Park, Plot no 32-33, Sector 142, Noida, Uttar Pradesh 201305
Our Locations
Copyright 2024 © DPDP Consultants, A Privacyium Tech Pvt. Ltd. Company
Under the DPDP Act, businesses in India are restricted from contacting Indian data principals without a proper legal basis and lawful purpose. Common communication methods used by businesses in India, such as email or phone calls, need to align with the DPDP framework. Failure to do so can result in penalties from the Data Protection Board, even if a business is in the process of DPDP compliance.
This means that businesses must determine the appropriate legal basis (consent or legitimate interest) for their activities and ensure that their email and phone call scripts are DPDP compliant. To achieve this, data cleansing is essential to establish the correct legal basis. If obtaining consent is challenging, conducting a Legitimate Interest Assessment (LIA) before processing data is crucial. Communication and consent processes must also adhere to the DPDP framework. DPDP compliance involves significant changes in how businesses process data, requiring a holistic approach to ensure compliance.