
Data Processing Agreement Under DPDP Act India — Complete Guide 2026
Section 8 of India’s DPDP Act 2023 makes a written Data Processing Agreement (DPA) mandatory for every vendor relationship involving personal data. This complete guide covers what a DPDP-compliant DPA must contain, how it differs from GDPR Article 28, penalties up to ₹250 crore, and a step-by-step vendor review action plan before the May 2027 enforcement deadline.