What everybody needs to know about Digital Personal Data Protection (DPDP) Act, 2023

The Digital Personal Data Protection Act was enacted by Parliament on 11 August 2023 and notified on 14 November 2025, following extensive nationwide consultations. The consultation process gathered 6,915 inputs, which helped shape the final version of the Rules which are now fully implemented.

India’s Digital Personal Data Protection (DPDP) Act,2023, marks a significant milestone in the country’s journey toward robust data privacy and protection. This landmark legislation aims to balance the privacy rights of individuals with the legitimate needs of organizations to process digital personal data, thereby fostering trust and transparency in India’s digital ecosystem.

Why India Needed the DPDP Act

India lacked a comprehensive legal framework for data protection. The rapid digitization of services and the exponential growth of data processing necessitated a law that would safeguard individuals’ personal information and set clear guidelines for businesses and government entities. The DPDP Act fills this gap by establishing a structured approach to digital personal data management, addressing concerns about misuse, unauthorized access, and lack of accountability.

Scope and Applicability

The DPDP Act applies to the processing of digital personal data within India, whether collected online or offline and subsequently digitized. It also covers digital personal data processed outside India if such processing is related to offering goods or services to individuals in India. Personal data is broadly defined as any information relating to an identifiable individual, while digital personal data refers to personal data in digital form.

7 Foundational Principles

• Consent: Data processing must be based on clear, specific, and informed consent from individuals.
• Purpose Limitation: Data can only be processed for the purpose for which it was collected.
• Data Minimization: Only the minimum necessary data should be collected.
• Storage Limitation: Data should be retained only as long as required for the stated purpose.
• Accuracy: Data must be kept accurate and up to date.
• Security Safeguards: Organizations must implement appropriate technical and organizational measures to protect data.
• Accountability: Data fiduciaries are accountable for compliance and must demonstrate adherence to these principles.

Key Roles and Definitions

• Data Principal: The individual to whom the data relates.
• Data Fiduciary: The entity (person, company, or government) that determines the purpose and means of processing personal data.
• Significant Data Fiduciary: Entities designated by the government due to the volume or sensitivity of data processed.
• Data Processor: An entity that processes data on behalf of a data fiduciary.

Rights of Data Principals

The DPDP Act, 2023 grants individuals several rights over their data:

• Right to Access: Individuals can request access to their personal data.
• Right to Correction and Erasure: Individuals can request correction or deletion of their data.
• Right to Grievance Redressal: Individuals can lodge complaints regarding data misuse or breaches.
• Right to Nominate: Individuals can nominate another person to exercise their rights in case of death or incapacity.

Duties of Data Principals and Fiduciaries Data principals have a duty to provide only authentic information and not to register frivolous complaints. Data fiduciaries must ensure compliance with the Act’s provisions, maintain transparency, and implement necessary security measures.

Contact us

Complinity, India’s Leading Compliance Management Software, helps companies manage their statutory and regulatory compliances on a secure software platform.

We are currently serving companies like Yes Bank, Panasonic, Amara Raja, Toyota, Max healthcare, UB Group, Oberoi Group and Brookfield Renewable apart from 1500+ Companies across 100+ industry verticals.

If you wish to know more how Complinity can help your organization minimize non-compliance risks, click the link below.

Request A Demo