The Digital Personal Data Protection Act, 2023 is India's comprehensive data protection law, governing how personal data of Indian residents is collected, processed, and protected.
It introduces the concepts of Data Fiduciary (the entity deciding how data is processed) and Data Principal (the individual), with consent-based processing, purpose limitation, and breach notification obligations to the Data Protection Board of India. Organizations classified as Significant Data Fiduciaries face additional obligations, including appointing a Data Protection Officer and conducting data protection impact assessments.
Max penalty exposure
Data Protection Board of India
Digital Personal Data Protection Act, 2023