India Introduces Secure Transport Data Sharing Policy Under DPDP Act

The Government of India has introduced a new Policy for Data Sharing from the National Transport Repository (NTR), a landmark move that aligns with the Digital Personal Data Protection Act (DPDP Act) and sets new standards for secure transport data sharing.

The NTR acts as the backbone of India’s transport data infrastructure, consolidating critical datasets from flagship platforms such as:

● Vahan – Vehicle Registration Certificates (RCs)

● Sarathi – Driver Licenses (DLs)

● eChallan – Electronic challans and traffic enforcement data

● eDAR – Electronic Detailed Accident Reports

● FASTag / NETC – Tolling and highway usage records

Together, these platforms account for over 390 million registered vehicles, 220 million driving licenses, and vast enforcement and tolling records. The NTR is regularly accessed by ministries, state departments, law enforcement agencies, academic institutions, and private organizations.

Until now, requests for transport data lacked a unified legal and procedural framework, creating challenges around security, consent, and misuse risks. To close this gap, the Ministry of Road Transport and Highways (MoRTH) has formalized a structured, consent-driven process for both government and private entities seeking access to datasets.

Key Features of the New Transport Data Sharing Policy

● Uniform Legal Framework – Ensures data sharing complies with the DPDP Act and related privacy laws.

● Structured Approval Process – Every request for data from Vahan, Sarathi, eChallan, eDAR, and FASTag must pass through an approval system specifying dataset type, purpose, and compliance requirements.

● Consent & Privacy Safeguards – Only authorized entities can access data, restricted strictly to lawful, approved uses.

● Support for Research & Innovation – The policy facilitates academic research, transport innovation, and ease of doing business, while upholding citizen rights.

● Digital Governance & Oversight – All ministries, departments, and stakeholders must follow the guidelines under the supervision of the Competent Authority.

Balancing Access, Innovation, and Privacy

MoRTH emphasizes that the policy strikes a balance between data-driven development and citizen privacy protection. By regulating data access under a legally robust and citizen-centric approach, the government aims to enable digital governance, transport innovation, smart mobility solutions, and public safety enhancements without compromising data security.

This policy also reinforces India’s commitment to responsible digital infrastructure management, ensuring transparency, accountability, and trust in the way sensitive transport data is used.