DPDP reference

Rule 9: Contact information of person to answer questions about processing

Last checked 6 Nov 2026

Every Data Fiduciary prominently publishes on its website or app the business contact information of its Data Protection Officer, if applicable, or of a person who can answer questions about processing. It also mentions this in every response to a communication exercising a Data Principal's rights.

Applies to
Every Data Fiduciary.
Starts
13 May 2027 (Rule 1(4)).
Penalty
Up to ₹50 crore (s.33, Schedule item 7).
Source
G.S.R. 846(E), Digital Personal Data Protection Rules, 2025, rule 9; G.S.R. 892(E), corrigenda

Questions

Where must the privacy contact be shown?

Prominently on the website or app, and in every response to a rights communication (Rule 9).

Related

Next

Join early access

Not legal advice.