Contact us

      The Digital Personal Data Protection (DPDP) Act, 2023, operationalised through the 2025 Rules, introduces a stringent framework for personal data governance. For e-commerce and consumer enterprises, which rely heavily on data-driven personalisation and digital engagement, the implications are transformative.

      Key highlights of the report

      • Consent centric data processing

        Explicit, informed consent is mandatory for collecting and using personal data. Bundled or implied consent is invalid, requiring redesign of onboarding and marketing flows

      • Transparency and notices

        Privacy notices must be clear, modular, and multilingual, detailing data categories, purpose, and value exchange. Traditional lengthy T&Cs will no longer suffice

      • Data minimisation and retention

        Businesses must limit data collection to what is necessary and enforce strict retention timelines

      • Grievance redressal and governance

        Platforms must appoint grievance officers and implement mechanisms for user rights – access, correction, and erasure

      From Cart to Compliance: DPDPA’s ripple in Consumer Markets

      DPDP Act, 2023, with the 2025 Rules, set a strict framework for personal data governance for e-commerce and consumer enterprises

      Download

      How can KPMG in India help

      Use cyber security to protect your future
      Read more

      KPMG in India, with its vast repertoire of skill sets and resources is aptly positioned to offer clients an array of services.
      Read more

      Transformation driven by data, enabled by digital technology, and led by business initiatives
      Read more

      Key Contacts

      Akhilesh Tuteja
      Akhilesh Tuteja

      Partner & National Leader, Clients and Markets

      KPMG in India

      Atul Gupta
      Atul Gupta

      Partner and Head - Digital Trust and Cyber

      KPMG in India

      Puneet Mansukhani
      Dr. Puneet Mansukhani

      National Sector Head - Retail, Global Retail Head - Digital & Technology Transformation

      KPMG in India

      Nikhil Sethi
      Nikhil Sethi

      National Leader Consumer Goods and Co-Lead Customer & Operations

      KPMG in India

      Nitin Shah
      Nitin Shah

      Partner – Digital Trust, Head – Cyber Security, Resilience and Privacy Strategy & Governance

      KPMG in India

      Shikha Kamboj
      Shikha Kamboj

      Partner, Digital Trust, National Leader, Data Privacy and Ethics

      KPMG in India

      Access our latest insights on Apple or Android devices

      kpmg-insights-edge-qr