Web Data Vendor Due Diligence India: DPDP Guide 2026
Introduction Indian enterprises now buy web data the way they buy any other critical input: through procurement, legal review and an information-security questionnaire. Marketplace prices from Amazon.in and Flipkart, quick-commerce shelf data from Blinkit, Zepto and Swiggy Instamart, and restaurant data from Zomato and Swiggy all feed pricing, category and strategy decisions. The question reviewers ask first is simple: does this data carry personal data, and can the provider prove it does not? Short answer: Web data vendor due diligence in India means checking that a provider collects only public business data (products, prices, stock, ranks, aggregate ratings), excludes personal fields by design, and backs this with a written data inventory, NDA, clear usage rights, retention rules, security controls, an SLA and an audit trail. The DPDP Act 2023 makes this review a board-level topic. This guide explains the Digital Personal Data Protection Act and the DPDP Rules in plain words,...