DPDP Compliance for Manufacturing

Employee Biometric Data

• Explicit consent required for fingerprint/facial recognition
• Use only for stated purpose (facility access)
• Delete within 90 days of employment termination

IoT & Machine Data

• If sensors track employee location/behavior, consent required
• Segregate operational data (machines) from personal data
• Quarterly review of data flows

Supply Chain Data

• Vendor contact, pricing, logistics data requires DPA
• Standardize vendor agreements
• Audit sub-contractors' data handling

Facility Access Logs

• Access logs are personal data
• Retain only as long as needed for security (30-90 days)
• Restrict access to security team only

Disclaimer: General informational article. Consult industrial compliance experts.