DPDP Act (Digital Personal Data Protection Act)

The Digital Personal Data Protection Act is India's data-protection law governing how organisations collect, process, store and share the personal data of individuals. It establishes duties for entities that handle personal data — including obtaining valid consent, using data only for stated purposes, keeping it secure, and honouring individuals' rights over their information. For learning and training platforms this is directly relevant, because an LMS holds personal details, learning activity and assessment records for every employee or learner. Compliance implications include clear consent and privacy notices, role-based access controls, secure storage, defined retention periods, and the ability to correct or erase data on request. Organisations increasingly expect their LMS vendor to support these obligations, including India data residency and strong access controls. edzlms is designed to help Indian organisations meet DPDP expectations through India-hosted deployment, granular permissions and auditable data handling.