No Processor Without A Contract
A Processor may only be engaged under a valid contract
Read the full guide: Section 8(2) — DPDP Act compliance guide
Watch in English
Summary
A Processor needs a contract. A valid one.
A Processor may only be engaged under a valid contract
Full transcript
A Processor needs a contract. A valid one.
Section 8(2) lets them engage a Processor
for activity related to offering goods or services,
only under a valid contract.
Pause. What is that word doing there?
Only. It is a condition, not a formality.
No valid contract, no lawful engagement.
The sub-section does not list the clauses.
Rule 6(1)(f) adds the safeguards clause.
Contract first. Processing after.
s.8(2) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027