🏦
Banking & NBFCs
RBI-aligned data governance & breach response
Common data types
KYC documents, account statements, credit history, e-KYC biometrics
Relevant DPDP sections
S.8S.8(6)S.10
Key obligation
Reasonable security safeguards and prompt breach response; SDF duties (DPO, DPIA, annual audit) for large institutions.
💳
Fintech & Payments
Consent-first flows for payment & lending apps
Common data types
PAN, Aadhaar, bank account, transaction history, credit score
Relevant DPDP sections
S.4S.6S.8
Key obligation
Explicit consent for credit-data sharing; data-processing agreements with payment processors; breach notification.
🏥
Healthcare
Sensitive health-data handling for clinics, hospitals & labs
Common data types
Medical history, diagnoses, prescriptions, insurance details
Relevant DPDP sections
S.6S.8S.9
Key obligation
Strict access logging; patient consent before sharing with labs or insurers; safeguards for sensitive data.
🛒
E-commerce
Consent at cart, checkout & marketing
Common data types
Name, address, contact, payment, order & browsing history
Relevant DPDP sections
S.5S.6S.8
Key obligation
Clear notice and purpose-wise consent at checkout; cookie consent; retention limits.
🎓
EdTech
Student & minor data done lawfully
Common data types
Student records, guardian details, assessments, usage data
Relevant DPDP sections
S.6S.9
Key obligation
Verifiable parental consent for under-18s; no behavioural tracking or targeted ads to children.
🧩
SaaS & B2B
Multi-tenant data inventory & DPA tracking
Common data types
Customer PII within tenant data, support records, logs
Relevant DPDP sections
S.7S.8
Key obligation
Processor obligations via contract (DPAs); data inventory and lineage; breach support to clients.
🛡
Insurance
Health & financial sensitivity flags
Common data types
Health declarations, financial details, nominee & claim records
Relevant DPDP sections
S.6S.8S.10
Key obligation
Consent for sensitive data; access controls; SDF duties where notified.
📡
Telecom
Lawful processing of call records & location
Common data types
Call detail records, KYC, location, usage
Relevant DPDP sections
S.7S.8S.10
Key obligation
Lawful retention; SDF duties (DPO, DPIA, audit); breach notification.
💼
HR & Staffing
Employee data processing agreements
Common data types
Employee PII, payroll, background checks, biometrics
Relevant DPDP sections
S.7S.8
Key obligation
Processing for employment purposes; DPAs with payroll & benefits vendors; access controls.
🏢
Real Estate
Buyer KYC inventory & vendor DPAs
Common data types
ID proofs, financials, contact, agreement records
Relevant DPDP sections
S.5S.6S.8
Key obligation
Consent and notice at onboarding; vendor DPAs; retention schedules.
🚚
Logistics & Delivery
Location-data consent & withdrawal
Common data types
Addresses, contact, driver & fleet data, location
Relevant DPDP sections
S.6S.8
Key obligation
Consent for location use with easy withdrawal; retention limits; vendor DPAs.
✈
Travel & Hospitality
Passport & PII retention schedules
Common data types
Passport/ID, payment, preferences, stay history
Relevant DPDP sections
S.5S.6S.8
Key obligation
Notice and consent at booking; defined retention; breach notification.
🎬
Media & OTT
Viewing-data consent & personalisation
Common data types
Account, payment, viewing history, device data
Relevant DPDP sections
S.6S.8
Key obligation
Consent for personalisation with easy withdrawal; cookie and tracker consent.
🏭
Manufacturing & Retail
Unified in-store & online consent
Common data types
Customer PII, loyalty, CCTV, vendor data
Relevant DPDP sections
S.5S.6S.8
Key obligation
Consent across channels; CCTV and biometric notices; vendor DPAs.
Industry mappings are indicative. Your exact Data Fiduciary / SDF classification and obligations are confirmed in your free assessment and detailed gap report.