Quick Answer

Under Section 16 of the DPDP Act 2023, the Central Government may restrict transfer of personal data to certain countries or territories. Until a negative list is published, transfers are permitted — but organisations must still have a contractual basis (Data Processing Agreement) with overseas recipients. A Cross-Border Transfer Agreement defines the obligations of the overseas Data Processor and ensures DPDP Act compliance.

Cross-Border Data Transfer Agreement — DPDP India

Generate a DPDP-compliant cross-border data transfer agreement — covering transfer safeguards, recipient obligations, data principal rights, and breach notification across borders.

₹1,499 one-time · instant delivery

Quick AnswerCross-border data transfers require robust contractual protections. This agreement covers: transfer purpose and legal basis, recipient security obligations, data principal rights enforcement, breach notification across borders, and data localisation fallback provisions.

Tell us about your organisation

Organisation Name

Your Name

Designation

Work Email

Customise your document

Transfer origin

Recipient country

Data categories to be transferred

Transfer relationship

Document Preview

Parties and recitals

Transfer scope and purposes

Legal basis for transfer

Data categories and volumes

Recipient obligations (security, purpose limitation)

Data principal rights in recipient country

Breach notification procedure (cross-border)

Audit and inspection rights

Subprocessor restrictions

Government access disclosure

Data localisation fallback clause

Governing law and dispute resolution

Termination and data return/deletion

Complete payment to unlock full document

What you get: Professionally drafted, DPDP-compliant document emailed within minutes.

Email for delivery

Full Name

Secured by Razorpay · Instant delivery to email

Frequently Asked Questions

Does DPDP currently restrict cross-border transfers?+

As of mid-2026, the government has not published the restricted country list. Transfers are generally permissible with safeguards. Implement this agreement now to be ready for future restrictions.

What safeguards must be in place for international transfers?+

Contractual protections (this agreement), recipient country adequacy assessment, and explicit data principal consent where required. Higher-risk transfers (sensitive data) need stronger safeguards.

Which governing law should the agreement use?+

For transfers from India, the governing law should be Indian law (DPDP Act 2023) with jurisdiction in India, unless a different arrangement is required by the recipient country's regulations.

Every Sunday

The Sunday DPDP Brief

One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.

No spam. Unsubscribe with one click, anytime.