Clear notice & consent
Itemised notice in plain language; consent that can be withdrawn as easily as given.
Region · India
Face verification in India.
India's Digital Personal Data Protection Act puts consent at the centre. For regulated onboarding, RBI's video-KYC framework also expects liveness and face matching.
DPDP Act 2023 · DPDP RulesKey laws
What applies in India.
DPDP
DPDP Act, 2023
Processing needs free, specific, informed and unambiguous consent with a clear notice, or another legitimate use. Data fiduciaries must secure data and erase it when the purpose ends.
RULES
DPDP Rules, 2025
Notified in November 2025 with phased commencement for most obligations — check current dates with counsel.
RBI
Video-KYC (V-CIP)
RBI's KYC Master Direction permits video-based customer identification with liveness checks and face matching against documents.
IT ACT
SPDI Rules, 2011
Classed biometrics as sensitive personal data; being superseded as DPDP obligations commence.
Your checklist
What you need to do.
Purpose limitation
Use face data only for the stated purpose, e.g. onboarding.
Erase on completion
Delete templates when the purpose is met or consent is withdrawn.
Aadhaar boundaries
Use UIDAI's authorised channels for Aadhaar face authentication; SIMSIM complements selfie-to-document matching and liveness.
How SIMSIM helps
Privacy-first by design.
Templates, not photos
Less sensitive data held, smaller breach impact.
Deletion by API
Honour withdrawal and retention schedules in code.
Processor terms
A DPA with the transfer terms your market needs.
FAQ
Questions from teams in India.
Is face verification allowed under the DPDP Act?
Yes, with valid notice and consent (or another legitimate use) and appropriate safeguards.
Can SIMSIM be used for RBI video-KYC?
SIMSIM can supply liveness and face matching within a V-CIP flow; the overall process must meet RBI's requirements.
Do you bill in INR?
Plans are priced in USD; GST is added where applicable.
General information, not legal advice. Last reviewed 2026-09-30. Confirm requirements with qualified counsel.
Other regions
Operating in more than one market?
Building for India?
Start free, or talk to us about DPAs, processing locations and volume pricing.