The Act does not have a size threshold, but it does have four distinct roles. Whether you're a Data Fiduciary, a Data Processor, a Consent Manager, or a Significant Data Fiduciary changes what you have to do. Answer eight yes-or-no questions and this page tells you which role you're in and what to do next. Runs in your browser, so nothing about your business goes anywhere.
Personal data means any data that identifies an individual or from which an individual can be identified. (Sec. 2(t), Sec. 3)
DPDP applies only to digital personal data. Paper-only records are outside. (Sec. 2(n), Sec. 3)
If yes, you are a Data Fiduciary. If someone else decides and you only execute, you may be a Data Processor. (Sec. 2(i))
Individual use (personal contacts, family photos) is outside DPDP. (Sec. 3(c))
A rough SDF-candidacy signal. Volume is one of the six Sec. 10(1) factors. (Sec. 10(1))
Sensitivity is another SDF-candidacy signal. (Sec. 10(1))
Section 3(b) applies extra-territorially to foreign entities serving India. (Sec. 3(b))
This is a Yes / No fact. Do not guess. (Sec. 10)
Not legal advice. This quiz is a decision-support tool. Confirm your classification with counsel before taking public positions.
