Offering Goods To India Is Enough
Processing outside India is covered if it relates to offering goods or services to people in India
Read the full guide: Section 3(b) — DPDP Act compliance guide
Watch in English
Summary
A company with no office in India can still be caught.
Processing outside India is covered if it relates to offering goods or services to people in India
Full transcript
A company with no office in India can still be caught.
Section 3 has a second limb.
It applies outside India too,
if the processing connects to offering goods or services
to Data Principals inside India.
Pause. So what actually triggers it?
Offering to people here.
Not where the company sits.
Not where the server sits.
Offer into India, and the Act follows.
s.3(b) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027