Section 3: Application of Act
Chapter: Preliminary
Overview
Defines when and where the Act applies — covers digital personal data in India and cross-border processing for Indian users. This section falls under the "Preliminary" chapter of the Digital Personal Data Protection Act 2023, which was enacted to establish a comprehensive framework for data protection in India.
Key Points of Section 3
- Act applies to digital personal data processed in India, whether collected online or digitized from offline sources
- Also applies to processing outside India for offering goods/services to Data Principals in India
- Does not apply to personal data processed by individuals for domestic purposes or data made publicly available by the Data Principal
Who This Applies To
Businesses with any digital data processing touchpoint involving Indian residents
Compliance Action Steps
- Audit all data collection channels (online forms, apps, digitized records)
- Identify any offshore processing of Indian citizens' data
- Document exemptions that may apply to your processing activities
How Complynz Helps
Complynz automates compliance with Section 3 through AI-powered assessments, policy templates, and continuous monitoring. Our platform maps each DPDP provision to actionable controls so your team can achieve and maintain compliance efficiently.
Take Free DPDP Assessment | DPDP Compliance Checklist | View Pricing