Quick Answer
FMCG companies processing consumer data through loyalty programmes, direct sales apps, and distributor networks must comply with the DPDP Act 2023. Consumer-facing FMCG brands typically act as Data Fiduciaries for end-consumer data while being Data Processors for distributor-provided data. The DPDP Act requires consent for marketing communications — opt-in is mandatory, making legacy marketing databases non-compliant unless re-consented.
Quick AnswerFMCG brands must obtain separate consents for loyalty programs, WhatsApp marketing, and data sharing with retail partners. Purchase data cannot be repurposed for advertising without explicit consent.
DPDP Compliance Checklist
- Audit loyalty program consent — review existing member data for DPDP-compliant consent
- Implement granular opt-ins: separate for email, SMS, WhatsApp, and push notifications
- Review distributor and retailer data sharing agreements — add DPDP DPA clauses
- Restrict use of purchase data for profiling — obtain separate advertising consent
- Review sampling and contest data — ensure participants consent to marketing use
- Implement easy unsubscribe across all consumer communication channels
- Review brand ambassador and influencer data handling — ensure compliance in contracts
- Train trade marketing team on retail partner data sharing obligations
- Publish clear privacy notice on product packaging QR codes and brand website
- Conduct quarterly DPDP review of all consumer-facing data collection
Download Full Compliance Guide (Free)
Get the complete sector-specific checklist, risk areas, and 30-day action plan — delivered to your inbox.
Frequently Asked Questions
Can FMCG loyalty programs use purchase history for personalised offers?+
Yes, with consent for personalisation. Loyalty program members typically consent to this — but review historical consent language to ensure it meets DPDP's explicit consent standard.
Does DPDP apply to contest/sweepstake participant data?+
Yes. Contest entry data is personal data. You must disclose how it will be used, obtain consent for marketing use, and delete data after the contest closes.
How does DPDP affect trade promotions with retail partners?+
Sharing consumer data with retail partners for joint promotions requires explicit consumer consent. Generic retailer data sharing clauses in loyalty T&Cs may not be sufficient.
Every Sunday
The Sunday DPDP Brief
One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.
No spam. Unsubscribe with one click, anytime.
