Most DPDP compliance guides miss the market research problem entirely.
They're written for fintech apps and e-commerce platforms — businesses where personal data is a byproduct of a transaction.
In market research, personal data isn't a byproduct. It's the entire product.
Three things research firms and brands need to fix before November 2026:
→ Consent needs to be auditable — not just ticked once and forgotten → Verbal data-sharing arrangements between agencies and brands are now a liability — formal contracts required → Long-running panels need a re-consent review — data collected for one study can't be repurposed indefinitely
And one thing brands don't realise:
Under the DPDP Act, the brand commissioning the research is the Data Fiduciary — not the agency running it. DPDP accountability doesn't stop at your research partner's door.
November 13, 2026 is the Consent Manager deadline. That's the one to build toward.
→ maction.com/dpdp-act-2026-market-research-india
#dpdp #dataprivacy #marketresearch #india #compliance









