Concept3 stories
Digital Personal Data Protection Act, 2023
In one line: The DPDP Act, 2023 is India's first comprehensive law on digital personal data, built around consent and duties on those who process data.
Key features
- Applies to digital personal data processed in India, and to processing abroad for offering goods or services in India.
- 'Data fiduciaries' must process data for lawful purposes with consent or for certain 'legitimate uses' (Section 7), keep it secure and report breaches.
- Exemptions in Section 17 cover, among others, prevention and investigation of offences, and, under 17(2), research, archiving and statistics.
- A Data Protection Board adjudicates breaches; penalties can reach ₹250 crore.
Timeline
Lok Sabha passed it on 7 August 2023 and Rajya Sabha on 9 August; assent came on 11 August 2023. Provisions are commencing in phases from 13 November 2025, with the remainder due on 13 May 2027.
Where to go next
- Data Protection Board of India
- Puttaswamy and the right to privacy
Digital Personal Data Protection Act, 2023 in the news
- Supreme Court issues notice on news publishers' challenge to the data protection law 28 October 2026
What the law requires.
- Transport Ministry seeks CERT-In audit of VAHAN, SARATHI portals after data sale reports 25 October 2026
India's data protection law and why it does not yet bite
- SBI finds 3,897 customer records on the dark web; DPDP breach duties start only in 2027 22 October 2026
India's data protection law, its principles and its slow start.
Previous-year questions on this
- 2024 · GS3 · 10 marks Describe the context and salient features of the Digital Personal Data Protection Act, 2023.
- 2022 · GS3 · 15 marks What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber…
- 2018 · GS4 · 10 marks The Right to Information Act is not all about citizens' empowerment alone, it essentially redefines the concept of accountability. Discuss.
- 2017 · GS2 · 15 marks Examine the scope of Fundamental Rights in the light of the latest judgement of the Supreme Court on Right to Privacy.
- 2024 · Prelims Under which of the following Articles of the Constitution of India, has the Supreme Court of India placed the Right to Privacy? (a) Article 15 (b) Article 16 (c) Article 19 (d) Article 21