DPDP Compliance
Last updated: August 2026
The Digital Personal Data Protection Act, 2023 (DPDP Act) governs how personal data of Indian residents is processed. Dental Suite is built DPDP-first: privacy controls are a product feature, not a promise. Here is what each clinic gets out of the box.
Data minimization
Dental Suite collects only the patient data a clinic genuinely needs to operate — name, contact details, date of birth, and treatment records. No more, no less.
Explicit consent capture
Consent is requested at the point of collection: when a patient books an appointment or opts into marketing and recall. Each grant or withdrawal is recorded with a timestamp, IP address, and source, and stored in a tamper-evident consent ledger.
Right to portability
Patients can request their records in a portable format. The clinic's Privacy workspace exports the full record — appointments, treatments, invoices, consent history, and referrals — as structured JSON at one click.
Right to erasure
Under DPDP Section 17(1), identifying fields can be erased while health data is retained for audit. The clinic's one-click anonymize tool clears all personal identifiers, keeping the record useful for regulatory purposes only.
Role-restricted access
Staff only see what they need. Access to patient records is scoped to the clinic, and roles (admin vs. staff) gate sensitive operations like billing, exports, and erasure.
Purpose-limited processing
Patient data is processed only for scheduling, records, billing, and consented marketing. Data is never sold or shared with third parties beyond the clinic's own service providers.
For any questions about data protection, contact us at hello@dental-suite.in.
Privacy built in, not bolted on
See how Dental Suite keeps patient data protected out of the box.