WrapTax

Are CA Firms Ignoring Their DPDP Liability?

With the introduction of the Digital Personal Data Protection framework, professional firms handling client data must rethink their compliance approach. Under the Digital Personal Data Protection Act, 2023, accountability does not stop at collecting data—it extends to how that data is processed, stored, and protected.

For CA firms and professional service providers, this means:

* You may still be liable for breaches even when data is stored on third-party platforms (like cloud providers).
* Any data breach must be reported to the Data Protection Board and affected clients without delay.
* Adequate security safeguards such as encryption, access logs, and strong contracts with data processors are essential.
* Ultimately, the primary responsibility remains with the firm handling the data.

In a profession built on trust and confidentiality, data protection is no longer just an IT issue—it’s a compliance and governance responsibility.

Are firms prepared for this shift? 🤔

Here’s to the women who lead with confidence and inspire with grace. Happy International Women’s Day from all of us at WrapTax! 🚀🌸