DPDP Act 2023 + your property data: what changed

TL;DR

The Digital Personal Data Protection Act 2023 is India’s first comprehensive data-privacy law.
Real-estate brokers, portals, and builders collect PII (contact info, PAN, Aadhaar, income) — all covered.
Core rights: right to access, right to correct, right to erase, right to withdraw consent.
Consent must be specific and revocable; pre-ticked boxes and “by using this site you consent” no longer valid.

What DPDP means for property buyers

Every time you fill a “Interested — please call me back” form, your data is shared with the builder + often 10-20 partner agencies. Pre-DPDP, opt-out was impossible. Post-DPDP (effective 2025 after transition period), consent must be explicit per-purpose, and you can demand erasure within 72 hours of request.

How to exercise your rights

Email the builder/broker/portal’s Data Protection Officer (DPO) — they’re required to publish DPO contact. Request: (a) list of all purposes your data is being processed for, (b) list of third parties your data was shared with, (c) deletion. Non-compliance: file with the Data Protection Board — penalties up to ₹250 crore per violation.

Brickplot’s DPDP posture

We don’t sell data. We don’t share your email with any builder. Your interactions with the site are stored anonymously for 90 days for analytics, then aggregated. Read our DPDP compliance page for specifics.

FAQs

Can builders still cold-call me?

Only if you gave specific consent for that purpose. Blanket “we may contact you” consent is invalid under DPDP. Report violations to the Data Protection Board.

Does DPDP apply to brokers working for builders?

Yes — they’re classified as Data Processors under the Act. Builders remain Data Fiduciaries and are liable for processor non-compliance.

Keep reading: NRI FEMA guide · home loan eligibility · RERA portals · how we score projects · latest reviews