DPDP Act 2023 Compliance
Last updated: June 2026
1. Data Fiduciary and Data Processor
In the context of the Digital Personal Data Protection (DPDP) Act 2023, Anu InfoTech Solutions acts as a Data Processor when developing platforms for our clients (who act as Data Fiduciaries). For our own website contact forms, we act as a Data Fiduciary.
2. Consent Management
We only process personal data for lawful purposes with explicit, clear, and itemized consent. When building platforms for clients, we implement robust consent-capturing UI components and backend consent registries.
3. Data Minimization
We adhere strictly to data minimization principles. We only collect data necessary for the specified purpose, such as executing a Mutual Fund transaction or scheduling an architecture consultation.
4. Right to Erasure & Correction
Data Principals have the right to request the correction, completion, updating, or erasure of their personal data. We provide APIs and workflows in our platforms to enable our clients to fulfill these requests promptly.
5. Reasonable Security Safeguards
We implement reasonable security safeguards, including encryption (AES-256), access control, and network isolation, to prevent personal data breaches, as mandated by the DPDP Act.