Marketplaces sit on a huge web of buyers, sellers and logistics, payment and ad partners.
In short
Marketplaces are Data Fiduciaries for buyers, and often for sellers too. The Act requires consent for marketing and profiling, minimization at checkout, easy deletion, and control over every processor in the chain. Penalties reach ₹250 crore.
What changes for this sub-sector.
You are a Fiduciary for buyer profiles and, frequently, for seller KYC and payout data too.
Recommendation, retargeting and marketing need clear opt-in consent, not pre-ticked boxes or dark patterns.
Logistics, payment, ad and analytics partners are processors; contract and oversee all of them.
Make account deletion and data erasure easy to find and to act on.
Collect only what an order needs; do not hoard browsing and device data indefinitely.
Report breaches of customer or seller data to the affected people and the Board.
Fix consent and the processor web first, then deletion.
The readiness check maps consent, processor and deletion gaps.
Take the readiness check →