Back to DPDPA Glossary Index
Section 16; Rules 13(4) and 15Processing & Consent

Cross-Border Data Transfer

Cross-border transfer involves processing or making personal data available outside India, including through overseas suppliers.

Meaning and legal context

DPDP does not universally require India-only hosting. Notified country restrictions, stricter sector laws, government orders and specified SDF restrictions must be considered separately.

Practical application

Map storage, remote access and onward transfers before assessing restrictions.

Official sources and editorial review

Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .

Put privacy knowledge into practice

Explore consent, data inventory and rights-request workflows with DPDPA Shield.

Explore the platform