Manufacturers don't always think of themselves as data businesses — but between workforce systems, connected machines (IIoT) and customer/dealer records, they process plenty of personal data. The DPDP Act applies, and the quiet, device-driven collection is where gaps hide.
Worker and workforce data
Attendance (often biometric), payroll, safety and health records are personal data — see employee data. Minimise, secure, and retain only as needed.
IoT and telemetry
Connected machines and wearables can capture data that identifies workers (location, performance). If it's personal data, the Act applies — be transparent and proportionate, and don't repurpose telemetry silently.
Customers, dealers and supply chain
Dealer, distributor and B2B contact data is personal data too. Notices, consent for marketing, and processor contracts across your supply-chain tools.
A manufacturing checklist
- Notices and minimisation for worker and biometric data
- Transparent, proportionate IoT/telemetry collection
- Security (Rule 6) across OT/IT systems
- Processor contracts with MES, CRM and cloud vendors
- Retention limits; erase when purpose ends
How DPDP Bridge helps
DPDP Bridge helps manufacturers map worker, device and customer data and put consent, security and retention around it. Take the free assessment to see exactly where you stand and what to do next.
This article is general information about the DPDP Act and is not legal advice. For guidance specific to your organisation, take the free assessment or speak to our team.