GLOSSARY · India compliance · Updated 27 October 2026
What is DPDP Act 2023?
The Digital Personal Data Protection Act, 2023 is India's data-protection law, setting rules for how organisations collect, use and protect personal data.
Businesses that decide why and how personal data is processed are called Data Fiduciaries. They need a valid purpose and consent, must give notice, keep data secure, handle correction and erasure requests and report breaches. Penalties can run up to ₹250 crore.
Phone numbers, call recordings and transcripts are personal data. A calling platform is usually a processor acting for you, which makes the contract and the consent you hold important.
At Vyora: Vyora has a guide to how secure AI voice agents are with customer data in India.
Common questions
- Are call recordings covered by the DPDP Act?
- Yes, when they contain personal data, which they almost always do.
- Who is responsible for consent, me or the platform?
- Usually you, as the business deciding to call. Your platform helps with security and access controls.
Related terms
Definitions are general information for businesses in India, not legal advice. All glossary terms · Try Vyora free