DPDPA

India's Digital Personal Data Protection Act — the law governing how organisations process the personal data of individuals in India.

The Digital Personal Data Protection Act (DPDPA) is India's data-protection law. It sets out how organisations (Data Fiduciaries) may collect, use, store and share the personal data of individuals (Data Principals), and the rights those individuals hold.

Core themes include lawful and purpose-bound processing, notice and consent, data-principal rights, security safeguards, breach notification and accountability. See our practical DPDPA guide for a deeper walkthrough.