Chapter IV — Transfers

DPDPA Section 16 — Processing personal data outside India

Applies to: Data Fiduciary

What this section does

Permits cross-border transfer of personal data except to countries restricted by the Central Government, and preserves stricter sectoral localisation rules (such as the RBI's payment-data directive).

Plain-English summary prepared by KensaraAI — not the statutory text. Read the official Act ↗

What you have to do

  • ▸ Track restricted-country notifications
  • ▸ Sectoral localisation rules continue to apply on top of the Act

Enforcement under this section (0)

No enforcement action citing this section has been recorded yet. The Data Protection Board is not yet issuing penalties under the DPDPA — this page will populate as enforcement begins.

Related sections

Automate compliance with Section 16

KensaraAI maps your processing to each DPDPA obligation and keeps the evidence trail regulators ask for.

Request a Demo