DPDP Act (Digital Personal Data Protection Act 2023): Definition, Meaning & Guide for Indian Businesses

India's first comprehensive data privacy law. Governs how businesses collect, store, process and share personal data of Indian residents. Rules notified in early 2025.

What is DPDP Act (Digital Personal Data Protection Act 2023)?

The Digital Personal Data Protection Act 2023 is India's primary data privacy law. It applies to processing of digital personal data within India, and to processing outside India that targets Indian residents. Every business is a Data Fiduciary and must: obtain consent, provide a privacy notice, allow users to access/correct/delete their data, appoint a Grievance Officer, implement security safeguards, and notify the Data Protection Board of breaches. Penalties range from 10,000 rupees up to 250 crore rupees per instance.