DPDP Act & WhatsApp Marketing: Staying Compliant in India

India's Digital Personal Data Protection (DPDP) Act sets real rules for how businesses collect and use personal data — including phone numbers and WhatsApp conversations. The good news: compliant outreach is also better outreach.

The basics

• Consent: get clear, informed consent before sending marketing messages.
• Purpose: use the data only for what the person agreed to.
• Withdrawal: make it easy to opt out — and honour it immediately.
• Records: keep an auditable trail of consent and withdrawal.

WhatsApp specifics

WhatsApp's own rules align with this: business-initiated marketing needs opt-in and approved templates, and "STOP" must stop the messages. A user who messages you first is generally fair to follow up with about that enquiry.

How ASH keeps you safe

ASH tracks consent per lead, treats WhatsApp marketing as strictly opt-in, honours STOP/unsubscribe automatically, and keeps an audit trail — so you can grow without crossing the line.