Is DPDP Act compliance mandatory for NBFCs?

Yes, the DPDP Act is mandatory for all organizations that collect and process customer data, including NBFCs.

What is the maximum penalty under the DPDP Act?

The maximum penalty is ₹250 crore per violation for failing to protect personal data. Failure to report a breach can result in up to ₹200 crore.

When do NBFCs need to comply?

NBFCs have to prepare for the DPDP Act before the deadline of 13 May 2027.

Who enforces the DPDP Act?

The Data Protection Board of India enforces the DPDP Act.

Can NBFCs use customer data for marketing?

Only if the customer has provided separate consent for marketing. Consent collected for loan processing cannot automatically be used for promotional messages or cross-selling financial products.

ravirajput, Author at SureGrid

Book A Demo

Blog

How NBFCs Can Comply with the DPDP Act (2027 Deadline Guide)

According to the DPDP Act, NBFCs must collect customer consent before collecting their data. They need to mention the purpose

08 July, 2026

Subscribe to our Newsletter!

Join Our Community – Subscribe Now and Be the First to Unlock Exciting New Innovations!

Your subscription could not be saved. Please try again.

Your subscription has been successful.

Ready to Supercharge Your Business?

Unlock the Power of Innovation with Surepass – Transform Your Business Today!

Book A Demo Contact Sales

Connect with Us

Unit No G-22, Ground floor, NDM-1,
Netaji Subhash Place, Pitampura, New Delhi,
North West Delhi. Delhi-110034

+91 9990690960

[email protected]

ISO 27001:2013 Certified

Products

Resources

Solutions

Frameworks

ravirajput

Subscribe to our Newsletter!

Ready to Supercharge Your Business?

Follow Us

Copyright © 2026 Suregrid. All rights reserved.