For housing societies, RWAs and apartment associations
DPDP compliance for housing societies
A society holds more personal data than most small businesses: resident registers, tenant documents, visitor logs, CCTV and gate app records, often run by volunteers. ConsentKit gives your committee simple notices, a visitor-log policy and a way to answer residents’ requests.
- Visitor logs and CCTV
- Resident and visitor data
- Defaulter lists
- Handle with care
- Full compliance
- 13 May 2027
Sunrise Gardens CHS asks for your consent
Some details are needed to run the society. Choose the optional uses below.
Where the DPDP Act touches a housing society
Pick an area to see what your society holds and what needs care.
What changes for your society on 13 May 2027
Societies are data fiduciaries like any business. Volunteers running them need simple, clear rules.
Residents need a noticeSections 5 and 6
Residents and tenants should know what the society collects and why, in a language they can read.
A resident notice for registration forms and your society app.
Directories and WhatsApp groups need choiceSection 6
Sharing a resident’s phone number with everyone is a separate purpose from running the society.
Per-resident choices for directories and groups.
Visitor data needs limitsSection 8(7) and Rule 8
Visitor logs and photos should be kept only as long as security needs, then deleted.
A retention setting for visitor data with a deletion log.
Gate app vendors are your processorsSection 8
The society is responsible for data held by its gate app, CCTV vendor and facility manager.
A vendor register and processor contract checklist.
Residents can ask what you holdSections 11 to 14
Residents can request access, correction and erasure where law allows.
A simple request form the secretary can manage.
Committee handoverSection 8(5) and Rule 6
Access and records must move to the new committee cleanly, and old access must end.
Role-based access that transfers with the office-bearer role.
A plan a volunteer committee can manage
Spread the work over a few committee meetings.
List what you hold
Registers, gate app, CCTV, WhatsApp groups, accounts and facility manager.
Adopt a policy
Pass a simple data policy at a committee meeting or AGM.
Notices and choices
Share the resident notice and collect directory and group choices.
Clean up
Delete old visitor logs and set retention in the gate app.
For every kind of residential community
Simple templates for volunteer committees.
Cooperative housing societies
Share certificates and member registers.
RWAs
Colonies and plotted layouts.
Apartment owners’ associations
Large complexes with facility managers.
Gated townships
Multiple towers and many vendors.
Facility management companies
Processors for many societies.
Co-living operators
High tenant turnover and KYC.
DPDP compliance for societies near you
Local guidance and onboarding in these cities, with support from our team in Kolkata.
Related sectors
Questions society committees are asking
For the full picture, read our DPDP Act guide or compliance checklist.
Does the DPDP Act apply to housing societies?
Yes. A society that holds residents’ or visitors’ personal data digitally, including in a gate app or WhatsApp, is a data fiduciary.
Can we display maintenance defaulters’ names?
Publicly displaying names and dues is risky. Contact defaulters directly and share only what the society’s bye-laws and law require.
Can we share CCTV clips in the WhatsApp group?
Avoid it. Share footage only for a clear security purpose or a lawful request, and log it.
Who is responsible, the society or the gate app company?
The society is the data fiduciary. The gate app company is its processor and needs a contract with suitable terms.
Do we need a data protection officer?
No. Name an office-bearer as the contact for data questions and grievances.
Get your society ready before May 2027
The readiness check takes about ten minutes and gives your committee a short, practical gap report.