Cross-border preparation

India data licensing preparation guide

Prepare an Indian dataset review around current DPDP instruments, commencement dates and source-specific permissions.

Sources and guidance · Reviewed October 2026

Separate notification from commencement

India’s Ministry of Electronics and Information Technology publishes the Digital Personal Data Protection Act materials and the 2025 Rules. A responsible preparation pack should identify which provisions apply on the planned collection, processing, and release dates. Do not rely on a blanket claim that every obligation began together, or that none matters until a future date. Ask Indian counsel to check the commencement notifications and any sector rules for the specific transaction.

Define the data and proposed purpose

Inventory digital personal data, source contracts, contributor permissions, and sensitive business information separately. A large multilingual corpus can combine original recordings, commissioned annotations, customer communications, and public documents with different rights. State exactly which use the lab wants: internal evaluation, fine-tuning, pretraining, benchmarking, or redistribution. Ask the reviewer to assess the proposed purpose, notices, consent or other applicable basis, and international-access questions against current law.

Make language claims measurable

Document language and dialect identification, code-switching, script normalisation, transcription standards, speaker diversity methodology, and quality checks. Avoid presenting a count of languages as proof of balanced coverage or a guarantee of buyer demand. Create a synthetic schema sample and aggregate coverage report first. Where a contributor or collection vendor supplied the material, check the agreement chain through to the specific commercial training rights offered to the buyer.

  • Keep a dated commencement and applicability note from qualified counsel.
  • List collection vendors and the permissions supporting each source batch.
  • Map destination entities, annotation vendors, and access countries.
  • Define how corrections, exclusions, and later source problems will be handled.

Review before release

Sources reviewed on 19 October 2026. This is a preparation checklist, not legal clearance, tax advice, or confirmation that an AI lab accepts suppliers from this jurisdiction. Ask qualified local counsel to review the actual dataset, collection history, proposed training purpose, recipient, and current rules before releasing personal data.

Sources & further reading

MeitY: Digital Personal Data Protection Act 2023 ↗MeitY: acts and policies, including 2025 Rules ↗
Use this as a preparation framework. It is not legal advice, a valuation or a promise that a buyer will accept your data.