Readiness assessment
Manufacturing · Automotive

The DPDP Act for Automotive

Connected cars, dealer CRM and telematics make automakers fiduciaries for drivers as well as employees.

In short

Location, driving and identity data need consent, minimization and security across the OEM-to-dealer chain. Penalties reach ₹250 crore.

Core impacts

What changes for this sub-sector.

Connected-car data

Location, telematics and driver-behaviour data is personal data needing consent and minimization.

Dealer CRM

Dealer and after-sales CRM data carries personal data; contract and oversee dealers.

Purpose limitation

Data collected for service or safety cannot silently power marketing or profiling.

Driver rights

Drivers can access, correct and erase their vehicle and profile data.

Cross-border telematics

Watch where connected-car data is stored and processed across borders.

Security

Vehicle and account data is a growing attack surface; secure it end to end.

Check your connected-car data.

The readiness check flags telematics, dealer and cross-border gaps.

Take the readiness check