DPDP for Talent and Casting Agencies
Manage artist profiles and audition tapes under India’s DPDP Act. Learn how casting agencies handle sensitive visual data and minor consent.
Discuss this page with an LLM
DPDP Action Sheet
Use this before your next workflow goes live. It keeps the useful parts visible and turns DPDP into checks your team can actually answer.
For DPDP for Talent and Casting Agencies, the DPDP question is how personal data enters the workflow, where it is stored, which tools touch it, what purpose was explained, and how deletion or withdrawal will work.
1. Lead Forms
Check:
- What data are you collecting?
- Is the purpose clear at the point of collection?
- Is marketing consent separate from service communication?
- Can the user withdraw consent later?
Common mistake: one checkbox that silently covers newsletters, sales calls, partner sharing and remarketing.
2. Email and WhatsApp
Check:
- Who is on the list?
- Where did consent come from?
- Is the list imported from a vendor, event, webinar, scrape or old CRM?
- Can you prove the source of consent?
Common mistake: treating every lead as permanently marketable.
3. Ads and Retargeting
Check:
- Are pixels or ad platforms receiving identifiable user behavior?
- Are audiences built from customer lists?
- Are lookalike or remarketing audiences using personal data?
Common mistake: assuming "the ad platform handles it" means your company has no DPDP responsibility.
4. Website Analytics
Check:
- Which tools run on the site?
- Are IP address, device identifiers, session IDs or form fields being captured?
- Is analytics used only for measurement, or also for profiling and targeting?
Common mistake: installing tools first and asking privacy questions later.
5. Vendor List
Make a quick list:
- CRM
- Email platform
- WhatsApp provider
- Analytics
- Ad pixels
- Form tool
- Landing page builder
- Webinar tool
For each vendor, answer: what data goes there, why, who can access it and how deletion works.
6. This Week's Action
Map one campaign from first click to final follow-up. Mark every place personal data is collected, enriched, shared, uploaded or used for targeting.
If your team cannot answer where the data came from and where it goes next, start with a data flow map before rewriting policy copy.
Book a DPDP clarity callWant all of this handled, end to end? Sanctum is the all-in-one DPDP compliance programme behind this site: legal position, data map, gap analysis, implementation, tooling, training, readiness opinion, and breach cover under one accountable owner. How all-in-one DPDP compliance works or see the Sanctum programme.
Managing Visual Data and Audition Tapes
The casting industry manages the recruitment of actors, models, and performers for media projects. Common data flows include receiving headshots from agents, recording video auditions, and sharing artist contact details with film crews.
Video recordings and high-resolution photos are personal data. When you share an audition tape with a director or production house, you are transferring data to a third party. You must ensure the artist knows exactly who is seeing their tape and for which specific project before they record it.
Common Casting Compliance Mistakes
- Indefinite Storage: Keeping every audition tape from the last decade “just in case” creates a massive data liability.
- Lack of Minor Consent: Collecting school records or parent phone numbers for child actors without a signed parental consent form.
- Unsecured Sharing: Sending artist portfolios via public, unencrypted link-sharing services without password protection.
- Excessive Collection: Asking for sensitive health information or private home addresses before an artist has even reached the final casting round.
The Retention Conflict
Agencies often maintain evergreen talent pools to fill future roles quickly. However, you cannot keep personal data forever. You must specify a clear timeframe for how long you will hold an artist’s profile. If a candidate is not selected for a specific project, you need their clear consent to move their data into a general talent database. Without this specific consent, you must delete their audition materials once the role is cast.
| Workflow | Data Type | DPDP Risk |
|---|---|---|
| Artist Onboarding | Physical traits, age, location | High |
| Auditioning | Video recordings, voice samples | Very High |
| Booking & Contracts | PAN, bank account, home address | High |
| Minor Casting | Parent ID, school records | Very High |
| Travel Logistics | Passport copies, food allergies | High |
This week
Audit your digital storage for “Old Auditions” or “Expired Project” folders. Delete all video files and contact lists for projects that closed more than 12 months ago. This reduces the amount of personal data you are responsible for protecting.
Now think about your work. Where does personal data enter your workflows? Where does it sit? Who else touches it?
Frequently asked questions
Can we keep headshots of actors we did not cast for a role?
You may only keep these if the artist gave consent to join your long-term talent pool. If they only applied for one specific role, you must delete their profile once that role is filled. Provide a clear option for artists to opt-in to future opportunities.
What are the rules for casting child actors under DPDP?
You must obtain verifiable consent from a parent or legal guardian before collecting any data from a minor. The Act strictly prohibits processing children's data in any way that might cause them harm or involves tracking their behavior for advertising.
Do we need a contract to share audition tapes with directors?
Yes, you should have a written agreement with every production house or director who receives your talent data. This agreement must state that they will only use the video for casting that specific project and will delete it afterward.