DPDP Rules status: compliance window active. Read the update

Skip to content
Finance & Fintech · Depth by product

Insurance Tech

Most insurance apps are not insurers — they're regulated intermediaries, and IRDAI has strong views on what intermediaries can show, compare, and earn.

Educational only · not legal adviceLast updated: 6 October 2026Written and edited by Sandesh Kokate

Why this is on a data and AI site: insurance apps handle health, income and family details, which are personal data under the DPDP Act. The DPDP Act does not treat health data as a special category, but IRDAI rules add their own data duties on top.

An insurance app is rarely the insurer itself. In most cases it is a regulated intermediary — a broker, aggregator, or corporate agent. It sits between the customer and the actual insurance company.

Because it is an intermediary, IRDAI rules apply to it directly. These rules cover four things:

  • What products the app can display.
  • How it is allowed to compare products.
  • What commissions are permitted.
  • How it must handle the health and financial data customers share to get a quote.
Quick self-check

Am I a Data Fiduciary?

Insurance apps handle sensitive health and financial data — run the self-check to line up your DPDP baseline before mapping IRDAI-specific duties.

Run it now

That framing changes how you should design the app. These parts are not free choices:

  • The comparison table.
  • The recommendation logic.
  • The disclosure of commissions.
  • The treatment of health information.

IRDAI's intermediary regime governs all four. Get them wrong and you have a compliance problem, not a UX one.

Educational only — not legal advice

This page summarises finance and fintech expectations for orientation. For binding rulings on your product, consult qualified counsel and the primary source below.

Source
India Code — Insurance Act, 1938

Consolidated text on India Code. Amendment currency not individually checked.