Contact us

      The Digital Personal Data Protection Act (DPDPA) 2023, enforced through the 2025 Rules, is transforming how Media and OTT platforms manage personal data in India. These platforms, which depend on personalisation, targeted advertising, and recommendation engines, now face strict mandates on data minimisation, consent management, children’s data protection, cross-border transfers, and breach response.

      Key highlights of the report

      • Data governance

        Limit data collection to essentials like streaming quality and personalisation

      • Consent management

        Explicit, revocable consent for personalized ads and recommendations; user dashboards for data access and deletion

      • Children’s data

        Verified parental consent and strong age-gating for minors

      • Cross-border transfers

        Data storage only in approved jurisdictions, impacting global delivery networks

      • Security & breach response

        Encryption, access controls, and rapid incident handling to protect sensitive viewer data

      Entertainment meets compliance: DPDPA and data privacy in media

      DPDPA 2023 reshapes Media & OTT compliance, driving trust, safety, and strategic advantage in a competitive landscape

      Download

      Key Contacts

      Akhilesh Tuteja
      Akhilesh Tuteja

      Partner & National Leader, Clients and Markets

      KPMG in India

      Atul Gupta
      Atul Gupta

      Partner and Head - Digital Trust and Cyber

      KPMG in India

      Nitin Shah
      Nitin Shah

      Partner – Digital Trust, Head – Cyber Security, Resilience and Privacy Strategy & Governance

      KPMG in India

      Shikha Kamboj
      Shikha Kamboj

      Partner, Digital Trust, National Leader, Data Privacy and Ethics

      KPMG in India

      DPDP Act and rules : Implications across sectors

      DPDP

      DPDPA demands strong vendor oversight, data minimisation, clear consent, rapid breach response and protection across IoT and smart rooms
      Read more

      DPDP

      Compliance evolves into a strategic edge, building trust, resilience, and customer empowerment in banking
      Read more

      DPDP

      DPDP Act, 2023, with the 2025 Rules, set a strict framework for personal data governance for e-commerce and consumer enterprises
      Read more

      DPDP

      DPDP Act 2023, through the 2025 Rules, defines a techno‑legal, enforceable framework for GCCs to safeguard digital personal data
      Read more

      DPDP

      DPDP Act 2023 with the 2025 Rules set a strong privacy regime for India’s healthcare and life sciences sector handling highly sensitive health data
      Read more

      DPDP

      DPDPA aims to strengthen the techno-legal framework for protection of digital personal data by providing necessary details and an actionable framework
      Read more

      DPDP

      The DPDP Rules 2025 serves as a crucial extension to the DPDP Act 2023, providing operational clarity for entities processing digital personal data
      Read more

      How can KPMG in India help

      Use cyber security to protect your future
      Read more

      Our Media & Entertainment practice comprises of a strong team of cross industry professionals who have worked across various segments.
      Read more

      Transformation driven by data, enabled by digital technology, and led by business initiatives
      Read more

      Access our latest insights on Apple or Android devices

      kpmg-insights-edge-qr