DPDP Act Voice AI Compliance Guide for India (2027 Deadline)
DPDP Act full enforcement May 13, 2027. Voice = biometric data. Granular + revocable consent required. We rank 6 voice AI platforms on Indian compliance.
Overview
India's Digital Personal Data Protection Act has 18-month substantive obligations rolling in — full enforcement is set for 13 May 2027. Voice recordings are classified as biometric data; consent must be granular, revocable, and free of pre-ticked boxes. We rank 6 voice AI platforms on DPDP readiness for Indian deployments.
Key Points
- AnveVoice / Caller Digital: India-region defaults + DPDP-aware flows
- ElevenLabs / Vapi / Retell: DPDP layer assembled by customer
- Penalties up to ₹250 crore for security safeguards failure
Summary
DPDP Act full enforcement May 13, 2027. Voice = biometric data. Granular + revocable consent required, no pre-ticked boxes. We ranked 6 voice AI platforms on 6 DPDP-relevant criteria.
Verdict
Pick a vendor with DPDP defaults baked in. Indian deployments serving Indian customers should not be retrofitting compliance across multiple vendors with 18 months to enforcement.