DPDP India Resources

What is DPDP Act?

The Digital Personal Data Protection Act (DPDPA) 2023 is India's comprehensive data protection law governing the processing of digital personal data. It establishes rights for data principals (individuals) and obligations for data fiduciaries (organizations) processing Indian personal data.

The Act applies to any organization—regardless of location—that processes personal data of individuals in India, making it crucial for global organizations with Indian customers or employees.

• Applies to digital personal data processed in India
• Extraterritorial scope for foreign organizations
• Consent-based framework with lawful purposes
• Data Principal rights including erasure and grievance redressal
• Significant Data Fiduciary designation for high-risk entities