DPDP Act Considerations for AI Hiring in India

What hiring data DPDP covers

• Identity and contact data collected at application
• Voice recordings and transcripts from AI interviews
• Scores, rubrics and recruiter notes derived from interviews
• Device and completion metadata (timestamps, IP where logged)
• Background or health information if collected in the same flow — higher scrutiny

AI interview-specific questions

Where do recordings live — India region or cross-border cloud? DPDP cross-border rules depend on government notifications; monitor updates with counsel.

How long are rejected candidate recordings kept? Retention should match hiring purpose, then deletion or anonymisation.

Did candidates receive clear notice before the voice interview — purpose, rights, contact?

Are automated scores profiling candidates in ways your policy discloses?

1. Employer as data fiduciary

   You determine why applicant data is processed — vendor contracts must limit use to your instructions.

2. Vendor as processor

   Interview platform subprocessors need security, breach notification and deletion clauses — not only uptime SLAs.

3. Candidate rights

   Access, correction and erasure requests may apply — design workflows before scale hiring, not after a complaint.

Disclaimer

DPDP rules and board guidance continue evolving. This page is general information for product and recruiting teams — not legal advice, not a compliance certification for Intervues or any employer, and not a substitute for qualified India counsel. Map your flows, notices and agreements professionally.

Related glossary entry when indexed: dpdp-act-hiring-data. Product pricing: /pricing — Candidate-side credits on /pricing are listed in USD with an illustrative ₹ line for scale — pay per interview, no subscription. There are no official INR SKUs yet.

Frequently asked

Related