Glossary
DPDP Act 2023
India's Digital Personal Data Protection Act, 2023: the law governing how organisations collect, use and protect digital personal data, with Rules notified in 2025.
What is DPDP Act 2023?
The Act applies to digital personal data processed in India and, in some cases, outside it. It requires a lawful basis, usually consent, with clear notice; limits use to the stated purpose; requires reasonable security safeguards; gives individuals rights to access, correct and erase their data and to a grievance process; and sets special rules for children's data, including verifiable parental consent and restrictions on tracking and behavioural monitoring of children.
For a trip operator, the roster is personal data, medical notes are personal data, and live location is personal data. The operator deciding why and how it is processed is the Data Fiduciary; a software provider processing it on the operator's instructions is a Data Processor.
On a live trip
Collect only what the trip needs, tell travellers what you collect and why, keep it secure, delete it when the purpose ends, and name someone travellers can contact about their data.
Keep exploring
Your next departure could be the calm one.
We're onboarding a small group of early operators before launch. Tell us how you run trips today.