No. Under the DPDP Act only Significant Data Fiduciaries must appoint a Data Protection Officer. Other organisations do not have to appoint a DPO, but they must publish the business contact information of a person who can answer Data Principals' questions about their personal data, and they must set up a grievance redressal system.