/ Healthtech × DPDP × CDSCO Specialist · Updated 2026-10-22

CA for Healthtech DPDP + CDSCO Combined India, sensitive health data + medical device regulation integrated.

Healthtech / medtech / digital health company faces four overlapping regulatory stacks: DPDP Act (sensitive health data), CDSCO (medical devices + diagnostics + telemedicine), IRDAI (healthcare financing), GST healthcare exemption analysis. BQP delivers integrated advisory across all four + Section 115BAA + Section 194R TDS + DPIIT Startup India. Here's the complete framework.

Get a firm quote → WhatsApp instead

Written by CA Durgesh Chavda

Chartered Accountant (ICAI) · Founder, Bharat Quantum Prospera · US incorporation, India-US DTAA, FEMA ODI, NRI taxation, cross-border structuring · LinkedIn

/ Four parallel regulatory stacks

Why integration matters.

DPDP Act 2023 + health data: health data is sensitive personal data under DPDP; special consent + security requirements. Likely Significant Data Fiduciary if large patient / consumer base.
CDSCO (Central Drugs Standard Control Organisation): medical devices, diagnostic equipment, in-vitro diagnostics - registration + import licence + manufacturing licence.
IRDAI: healthcare financing / insurance intermediary / telemedicine with insurance claims - regulatory framework.
GST healthcare exemption (Section 32): specific exemptions for healthcare services + diagnostic + medical devices. Classification critical.
Section 194R pharma TDS: 10% TDS on business perquisites to doctors (samples, conferences, equipment, hospitality).
Clinical trial + research data: Section 16 DPDP + sector-specific health research framework.
Ayushman Bharat Health Account (ABHA): DigiHealth integration framework.

/ Common healthtech scenarios

Where integrated matters.

Scenario 1: Telemedicine platform

DPDP: sensitive patient data + consent + storage India localisation.
CDSCO: platform classification (service vs device?).
GST: diagnostic / consultation service exemption analysis.
Section 194J: TDS on doctor payment.
IT Intermediary Rules: Indian representative + grievance officer.

Scenario 2: AI-powered diagnostic platform

CDSCO: medical device classification (if diagnostic conclusion / recommendation).
DPDP: patient imaging + health history + consent + Significant Data Fiduciary.
MeitY AI advisory: deepfake labelling if AI-generated images; large model registration.
GST: diagnostic service exemption vs medical device sale GST.
Section 194R: free trial offerings to hospitals / doctors.

Scenario 3: Medical device manufacturing

CDSCO: manufacturing licence + import licence + registration.
Section 115BAB: 15% rate on new medical device manufacturing.
PLI Medical Devices: 5% incentive on incremental sales.
Customs: specific HSN + FTA preferential rate for imported components.
Pollution Control Board: environmental compliance.

/ Our scope for healthtech / medtech

Full stack.

DPDP compliance for sensitive health data + Significant Data Fiduciary assessment.
CDSCO registration for medical devices / diagnostics / telemedicine as applicable.
GST healthcare exemption analysis + specific advance ruling if beneficial.
Section 194R TDS structuring for pharma / medical device marketing.
IRDAI licensing if healthcare insurance intermediary.
FDI structuring (hospitals, diagnostics, telemedicine - sector-specific).
DPIIT Startup India + Section 80-IAC application.
Section 115BAB + PLI Medical Devices for manufacturing scope.
Clinical research + ABHA integration regulatory analysis.
Fundraising + ESOP + 409A + Rule 11UA valuation.

Last updated: 2026-10-22.

/ Ready when you are

Healthtech / medtech / digital health company?

DPDP + CDSCO + IRDAI + GST + 194R + 115BAB + PLI integrated engagement. BQP specialist practice. Scope-based.

Get a firm quote → WhatsApp Durgesh

FAQ

Common questions, answered.

Why integrate DPDP + CDSCO + GST advisory for healthtech?

Health data is sensitive personal data (DPDP) + medical device activity is CDSCO-regulated + healthcare services have specific GST exemptions. Integration avoids: DPDP consent flow design conflict with CDSCO patient-data retention; GST classification driving CDSCO device classification decision; Section 194R TDS structuring for pharma marketing + DPDP compliance for marketing data collection. One firm, one point of accountability.

Is my healthtech app a 'medical device' under CDSCO?

Depends on function. Software that monitors / records health parameters without diagnostic conclusion: typically not a medical device. Software that provides diagnostic conclusion / recommendation + is used for clinical decision-making: CDSCO classification as Software as Medical Device (SaMD). AI diagnostic platforms typically are SaMD. Classification analysis is foundational and affects all downstream compliance.

What's the GST position for telemedicine?

Section 32 CGST Act exempts specific healthcare services. Telemedicine consultation by qualified medical practitioner may qualify under 'medical services' exemption. Diagnostic / lab services + medical device sales may be taxable at 5% / 12% / 18%. Composite service with mixed components requires specific classification. Advance ruling helps for complex cases.

How does Section 194R affect pharma marketing?

10% TDS on business perquisites to doctors - samples, conferences, hospitality, equipment, consultancy fees. Threshold INR 20,000 per year per doctor. Pharma / medical device companies must deduct + deposit + file Form 26Q. Companies struggle with doctor identification + perquisite valuation. BQP structuring includes doctor master setup + perquisite valuation methodology.

Does healthtech qualify for Section 80-IAC Startup India tax holiday?

Yes if DPIIT-recognised startup + works on innovation / improvement in process / product / service / scalable business model + incorporated after April 2016 + turnover below INR 100 crore. Healthtech typically qualifies. 3-year 100% tax holiday from first 10 years of incorporation. Application via Form 10-IAC.

Does BQP handle integrated healthtech / medtech advisory?

Yes - specialist practice. DPDP + CDSCO + IRDAI + GST + Section 194R + 115BAB + PLI + DPIIT + fundraising + ESOP. Co-ordinated with CDSCO regulatory consultant partner firm + IRDAI legal partner firm + global privacy counsel for GDPR integration. WhatsApp +91 78018 87130.