DPDP Act
India's Digital Personal Data Protection Act, 2023.
The DPDP Act governs how personal data, including candidate data, is collected, used and deleted, with consent and purpose limits. ATS vendors should host data in India, delete on request and sign data-processing agreements.