Skip to content
Trayambic Advisory

Sector by sector, where the pressure comes from.

Any organisation that processes digital personal data in India may have obligations under the Digital Personal Data Protection Act, 2023. What those obligations look like, and who asks first (a regulator, a client or the market) differs from sector to sector.

TWELVE INDUSTRIES · BY WHERE THE PRESSURE COMES FROM
INDUSTRY 01 / 12PRESSURE FROM · REGULATOR

Insurance

WHY IT MATTERS NOW

Health, claims, KYC and nominee data passes between hospitals, TPAs and agents. Large insurers have already had public breaches.

WHO IT COVERS

Insurers, insurance brokers, corporate agents, TPAs, web aggregators and insurance marketing firms.

WHERE THE PRESSURE COMES FROM

IRDAI: its April 2026 guidelines require insurers and intermediaries to take measures to comply with DPDP.

SECTOR NOTES ARE GENERAL. OBLIGATIONS DEPEND ON WHAT EACH ORGANISATION PROCESSES.
FAQs

Before you write to us.

All FAQs →

Yes. A company that sells only to other companies still holds personal data on its employees and their families, job applicants, directors, shareholders, vendor and customer contacts, visitors, and the people on its CCTV footage. All of it falls within the Act.