DPDP in 60 seconds for CA firms
Article image
Your firm collects PAN, Aadhaar, bank statements and Form 16 from Clients. Under the Digital Personal Data Protection Act, 2023, that makes you a Data Fiduciary. From 13 May 2027, the duties apply in full.
What to do this quarter
- Stop collecting documents on personal phones and chats.
- Give every staff member their own login.
- Keep a record of who opened what, for at least a year.
- Erase what you no longer need.
- Write a one-page breach plan.
Reposha helps you handle Client data responsibly under the DPDP Act.
It is not a certificate and does not guarantee compliance. Read the full guide