AI/ML Security -- DPDP Compliance

DPDP Act AI Compliance Mapper

The Digital Personal Data Protection Act 2023 has direct and significant implications for AI systems processing personal data. This mapper identifies exactly which DPDP sections apply to your AI deployment and what you must do to comply.

Describe your AI system

Processes personal data of Indian individuals (names, email, phone, Aadhaar, financial data) Processes data of more than 1 lakh individuals (significant data fiduciary threshold) Makes automated decisions that significantly affect individuals (credit, hiring, insurance, medical) Processes data of children (anyone under 18) Data is shared with or processed by a third-party AI vendor (SaaS AI tool, API) Data is used to train or fine-tune an AI model Data is stored or processed outside India (cloud provider non-India region) System generates, modifies, or publishes content about real individuals