DPDP Act, explained
The Digital Personal Data Protection Act, 2023 is India's law on how organisations collect and use personal data in digital form. It calls the people whose data is processed data principals and the organisations that decide how it is processed data fiduciaries, and it sets duties for the fiduciaries and rights for the principals.
For a sales and marketing team, the ideas that matter most are consent and purpose. Personal data should be collected for a clear purpose, with a notice that explains it, and marketing messages should go to people who have agreed to receive them. People can withdraw consent, ask to see or correct their data, and ask for it to be erased, and those requests have to be honoured.
In practice that means recording where each lead came from and what they agreed to, respecting opt-outs on every channel, keeping only the data you need, and being able to find and delete a person's records on request. The Act works alongside rules that set out the details, so check the current requirements and take legal advice on what applies to your business.