DPDP Act
India's Digital Personal Data Protection Act, which governs how businesses collect, process and store the personal data of people in India, including messaging contact data.
One term from the WhatsApp Business Platform glossary. Last updated 2026-07-25.
The Act frames people as data principals with rights over their data, and businesses as data fiduciaries with obligations to obtain meaningful consent, limit purpose, and respond to access and erasure requests.
For WhatsApp messaging the practical implications are a demonstrable consent record per purpose, a defined retention policy rather than indefinite storage, and an operational path for handling a data-principal request within a reasonable period.
Related terms
- Consent ledger
- A record of when and how each contact gave permission to be messaged, for which purpose, and whether that permission has since been withdrawn.
- DSAR
- A data subject access request — a person asking a business what personal data it holds about them, and in many cases asking for it to be corrected or deleted.
- Data retention
- The policy defining how long a business keeps message and contact data before deleting it. Retention limits reduce both regulatory exposure and breach impact.
See DPDP Act in a real workspace
BotPulsar runs the official WhatsApp Business Platform with unlimited team members on every plan, starting at ₹300/month.