Does the DPDP Act cover B2B and business contact data?
Yes, in substance. The Act governs personal data — data about an identifiable individual — and a named employee's work email, direct line or job title identifies a person. There is no general carve-out for data collected in a business context, so B2B contact databases are within scope.
This surprises B2B companies that assumed the Act was a consumer statute. Prospect lists, event scans, enriched contact data and CRM records all describe individuals.
The practical consequences are ordinary ones: know what you hold, have a basis for the processing, keep it no longer than the purpose requires, and be able to answer someone who asks what you have on them or wants it deleted.
General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.
Related questions
Dinkar Singh — Dinkar covers privacy engineering at ProtectComply — discovery, consent propagation and the evidence trail behind them.
Where do you stand under DPDP?
Take the free readiness check and find out in 10 minutes.
Start free readiness check →