DPDPA readiness, in the context of your industry.

SaaS and technology

Often a fiduciary and a processor at once, with a growing vendor stack.

Typical data: Account, profile, and authentication data · Product usage and analytics data

Fintech

DPDPA alongside RBI and SEBI obligations, with sensitive KYC and financial data.

Typical data: KYC documents and identity proofs · Transaction and account data

Healthcare

Patient records touched by many people and systems over time.

Typical data: Patient records and treatment history · Diagnostic and lab results

Education

Student records spanning minors and adults, kept long after they leave.

Typical data: Admission and enrolment records, including parent or guardian details · Academic performance, attendance, and examination records

Insurance

Health, financial, and identity data held for the life of a policy and beyond.

Typical data: Policy applications and underwriting data, including medical history · Claims records and supporting documentation

E-commerce

Customer, payment, and browsing data at high volume, plus a logistics chain on every order.

Typical data: Account, browsing, and purchase history · Delivery address and contact details

BPO / ITES

Client's customer data processed at scale, almost always as a processor, not a fiduciary.

Typical data: Customer data processed on behalf of clients (calls, chats, tickets) · Call recordings and screen-capture logs

Digital services

User and audience data collected through apps, content, and advertising, often via third-party ad-tech.

Typical data: Account and profile data · Usage, engagement, and device data