A Human Who Answers
Publish the DPO's or a responsible person's business contact — and repeat it in every reply to a rights request
Read the full guide: Section 8(9) — DPDP Act compliance guide
Watch in English
Summary
There must be a human who answers.
Publish the DPO's or a responsible person's business contact — and repeat it in every reply to a rights request
Full transcript
There must be a human who answers.
Rule 9 says publish, prominently,
on the website or app, the business contact
of the Data Protection Officer, if applicable.
Pause. And if there is no officer?
Then a person who can answer for them.
Section 8(9) is the duty to publish.
Rule 9 adds where, and one more thing.
Mention it in every response to a rights request.
Every response. Not just the first.
s.8(9), r.9 — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027