Compliance

How Onfra Helps Indian Enterprises Achieve DPDP Compliance for Visitor Management

Mar 4 2026

Introduction The Digital Personal Data Protection Act, 2023 (DPDP Act) and the Rules notified in November 2025 have fundamentally changed what it means to run a visitor management system in India. Every check-in is now a data event with legal obligations. Every face photo is a consent decision. Every visitor record has an expiry date. […]

Digital Visitor Logs Under DPDP: How Long Can You Actually Keep Them?

Mar 4 2026

Introduction Ask any facilities manager how long they keep visitor records and the most common answer is some version of: “We’ve never really thought about it. They’re just there, in the system.” That answer — acceptable in India’s pre-DPDP era — is no longer legally defensible. Under India’s Digital Personal Data Protection Act, 2023 (DPDP […]

NDA Signing at Reception: Is It DPDP Compliant? What Legal Teams Need to Know

Mar 4 2026

Introduction NDA signing at the reception desk is standard practice for thousands of Indian corporates, technology firms, and manufacturing facilities. A visitor arrives, the receptionist presents a Non-Disclosure Agreement on a tablet or printed form, the visitor signs, and they enter. It is a sensible security practice. It is also a data event — one […]

DPDP for Security Teams: Managing Visitor Access Data the Right Way

Mar 4 2026

Introduction Security teams are on the front line of visitor data collection every day — and they are often the last to be consulted on data privacy compliance. The security officer who checks IDs at the gate, the supervisor who reviews visitor logs after an incident, the system administrator who manages access control records — […]

Biometric Data and DPDP: What Every Indian Office Must Know Before It’s Too Late

Mar 2 2026

Introduction Face photos at reception. Fingerprint scanners at the turnstile. Liveness detection before a visitor badge prints. Facial recognition that automatically identifies a repeat visitor. Biometric data processing is increasingly common in Indian offices, factories, and facilities — and for understandable reasons. It is fast, accurate, and difficult to forge. A face photo is harder […]

Visitor Data Privacy in India: Your Complete Obligations Under the DPDP Act

Mar 2 2026

Introduction Every person who walks through your office doors has a legal right to privacy. Not in theory — in law, and enforceable before India’s Data Protection Board of India with penalties reaching â‚ą250 crore. Yet most Indian organisations treat visitor data as administrative background noise. The sign-in sheet fills up. The tablet app logs […]

Can You Take a Visitor’s Photo at Reception? Here’s What the DPDP Act Actually Says

Mar 2 2026

Introduction It’s one of the most common questions being asked by facilities managers, security teams, and HR compliance officers across India right now: “We capture a visitor’s photo at check-in for their badge. Are we allowed to do that under the DPDP Act?” The short answer is: yes — but only if you do it […]

DPDP Penalties: How Much Can Non-Compliance Really Cost You?

Feb 28 2026

Introduction India’s Digital Personal Data Protection Act, 2023 (DPDP Act) introduced something India’s privacy regime never previously had: meaningful financial consequences. The Data Protection Board of India (DPBI), operational since November 13, 2025, has the power to impose penalties of up to â‚ą250 crore per violation. â‚ą250 crore is approximately USD 30 million. For most […]

The Data Protection Board of India: What It Is and What It Means for Your Business

Feb 28 2026

Introduction On November 13, 2025, India’s data protection enforcement era officially began. That was the day the Data Protection Board of India (DPBI) was formally constituted and became operational — the regulatory authority at the heart of the DPDP Act’s enforcement machinery. From that date, India has had a functioning data protection regulator capable of […]

How to Make Your Visitor Management System DPDP Compliant: A Step-by-Step Guide

Feb 28 2026

Introduction Your office reception desk is a data collection point. Every day, it gathers names, phone numbers, company details, purpose of visit, and often a face photo or ID document from every person who walks through your doors. Under India’s Digital Personal Data Protection Act, 2023, every one of those people is a Data Principal […]