Your members' data and India's DPDP Act
What the Digital Personal Data Protection Act asks of a mahallu, and how Rabita One helps the committee keep its members’ trust.
A mahallu's register is personal data, and because it is linked to religion, it deserves particular care. India's Digital Personal Data Protection Act, 2023 sets out how such data is kept.
The mahallu decides
Under the Act the mahallu is the data fiduciary: it decides why records are kept and how they are used. OptiFi runs Rabita One as the processor and acts only on the mahallu’s instructions.
Consent for each purpose
Rabita One records consent per house and per purpose, for example receipts on WhatsApp or notices. The mahallu publishes its own privacy notice in Malayalam and English.
Only what is needed
Rabita One never asks for or stores government ID numbers. Welfare records are limited to the committee members who handle them.
Kept, and let go
Records the mahallu must keep, such as the register, receipts and certificates, are kept. Other details follow a retention schedule, and members can ask for theirs to be erased. Data is kept in India.
