Enterprise AI (Level 8)
Topic Guide · 2026
DPDP Act & AI
DPDP Act for AI — how the Digital Personal Data Protection Act (India) applies to ChatGPT, Copilot and AI vendors in 2026.
Quick Answer
The DPDP Act (India, 2023, enforced 2025) governs how Indian companies collect, process and share personal data — including data pasted into ChatGPT, Copilot or any AI tool.
What you'll learn
- Data Fiduciary and Data Processor obligations
- Consent, purpose, retention rules
- Cross-border transfer rules
- AI-specific compliance: prompt logs, model training
- Vendor DPAs for AI tools
- Penalties and audits
Deep-dive guides
Frequently asked questions
Does DPDP apply to ChatGPT?+
Yes if any personal data of Indian residents is entered. You must have a lawful basis, purpose limitation, and — for most enterprise use — a DPA with OpenAI.
What is the DPDP penalty for AI misuse?+
Up to ₹250 crore per instance for personal data breach. Boards are now including AI misuse in their DPDP risk registers.
Want DPDP Act & AI training for your team?
Nirmal Rabari delivers this topic as a live corporate workshop across India, UAE, UK and US.