What Is This Module For?
The GDPR module helps Indian companies that process personal data of EU residents comply with the General Data Protection Regulation (EU) 2016/679 (GDPR) — which applies regardless of where you are based if you offer goods or services to EU residents.
Who Needs This?
Any Indian company that: sells products or services to EU customers, has EU employees or contractors, operates a website accessible to EU residents and tracks their behaviour, or processes EU customer data on behalf of an EU client.
Step-by-Step Guide
- Go to GDPR in the sidebar.
- Complete the GDPR applicability assessment to confirm whether GDPR applies to your organisation.
- If applicable, appoint an EU Representative (required for non-EU organisations under GDPR Article 27).
- Map your EU data processing activities — similar to your DPDP ROPA but with GDPR-specific fields (lawful basis, data subject rights mechanisms).
- Review your cross-border transfer safeguards — transfers from EU to India require Standard Contractual Clauses (SCCs) or another GDPR-approved mechanism.
Frequently Asked Questions
Q: Is India an "adequate" country under GDPR?
A: As of May 2026, India does not have an EU adequacy decision. Transfers of EU personal data to India require Standard Contractual Clauses or Binding Corporate Rules.
Q: Can dcomply manage both DPDP and GDPR compliance?
A: Yes. Many obligations overlap — consent management, breach notification, and DSR processes can serve both frameworks simultaneously.