Comply · National frameworks
India DPDPA + 2026 rules
India's data-protection law for AI processing personal data.
India's Digital Personal Data Protection Act (DPDPA), with its implementing rules, governs the processing of digital personal data. It matters for AI because agents processing personal data must rely on consent or a lawful ground, honor data-principal rights, and — for significant data fiduciaries — meet heightened obligations such as impact assessments and audits.
Who it applies to
Entities processing the digital personal data of individuals in India, including many foreign companies.
Key obligations
- Obtain valid consent or rely on a legitimate use
- Honor data-principal rights (access, correction, erasure)
- Apply purpose and storage limitation
- For significant data fiduciaries: DPIAs and audits
How Maetra maps agents to India DPDPA
Maetra detects personal-data processing across agents, records consent and control evidence in Comply, and maintains the audit trail DPDPA accountability expects.
In practice, Maetra:
- Scans and fingerprints each agent. Discover reads the agent’s code — its tools, data access and sensitivity, actions, model, and environment — into an evidence-backed profile tied to the exact file and commit.
- Decides what applies. That profile determines whether India DPDPA is in scope for the agent and which of its requirements apply.
- Auto-detects controls and surfaces gaps. Controls your code already satisfies are detected automatically from the scan; the rest become a clear list of gaps, each tied to the requirement and the evidence it still needs.
- Proves it and keeps it current. Close gaps with linked evidence or generated documents — reused across every framework the same control supports — and Maetra re-checks on each rescan and flags evidence that has gone stale.
Related frameworks
Prove India DPDPA compliance with Maetra
Classify your AI agents once and Maetra maps them to India DPDPA and every other framework it supports — generating the evidence and documentation, tracking gaps and deadlines, and sealing every decision in an immutable audit trail.