Handing customer data to a vendor does not automatically hand over the legal responsibility. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), a company that decides why and how personal data is used (the Data Fiduciary) remains responsible for compliance with the Act when a cloud host, payroll provider, CRM or analytics tool…