When can data be processed without consent under DPDP?
Section 7 lists legitimate uses such as specified state functions, compliance with law, medical emergencies, employment purposes, and certain publicly available data scenarios.
Legitimate use is narrow—do not treat it as a default alternative to consent for commercial marketing.
Document the legal basis for each processing activity in a register.
Related Act sections
Tools & resources
Back to Complete DPDP Guide | All DPDP FAQs
DPDP implementation support
- Gap assessment & remediation roadmap (INR 49,999+)
- Breach runbook & DPBI templates
- SDF / DPO / DPIA programs