Processing of Personal Information in India

For the purpose of processing your Personal Data in India, such processing is governed by the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (collectively referred to as “DPDP”). We are committed to protecting your personal data and maintaining your rights under law. By accessing this website, you acknowledge that your personal data may be collected and processed in accordance with the purposes stated herein and in Infosys Global Privacy Statement. All processing of personal data will be conducted lawfully, either with your consent or as permitted under legitimate use provisions of DPDP. Please note that the following provisions will apply to you, if you are a Data Principal (resident or citizen) in India, in addition to the Infosys Global Privacy Statement.

Your personal data will be retained only as long as necessary to fulfil the purposes for which it was collected or as mandated by law. We have implemented appropriate security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

Cross Border transfer of Personal Information:

In general, Infosys Limited, domiciled in Bangalore, is the Data Fiduciary processing your personal information.

In accordance with DPDP, we strictly adhere to all legal requirements for cross-border transfers of personal data relating to Indian data principals. Personal data will only be transferred outside India to jurisdictions offering an adequate level of protection or as expressly permitted within the DPDP framework. Before initiating any such transfer, we implement robust safeguards and contractual measures to ensure secure processing and uphold privacy rights, fully consistent with the obligations stipulated.

Your Data Subject Rights in India:

As a Data Principal located in India, where permitted, you are entitled to exercise the following rights:

• The right to access information about the Personal Information processed by us, including a summary of such processing activities.
• The right to correction and erasure of your Personal Information, where it is inaccurate, incomplete, outdated, or no longer necessary for the purpose for which it was collected.
• The right to grievance redressal, including the right to raise complaints regarding processing of your Personal Information.
• The right to nominate another individual to exercise your rights in the event of death or incapacity.
• Right to withdraw your consent at any time where such withdrawal shall apply with effect for future processing, in accordance with applicable law.

If you are a resident of India and you wish to exercise your Data Principal rights as called out above, please refer to the section on exercising “Your Rights” in the Infosys Global Privacy Statement.

This privacy statement may be updated periodically; any modifications will be reflected on this page along with the revised effective date.