DPDP stands for Digital Personal Data Protection. The Digital Personal Data Protection Act, 2023 is India's data protection law governing the processing of digital personal data, and it is supported by the Digital Personal Data Protection Rules, which set out the operational detail the Act leaves to be prescribed.
You will also see DPDPA used as shorthand for the same statute. The Act establishes the Data Protection Board of India, defines the roles of Data Fiduciary, Data Processor, Data Principal and Consent Manager, and sets out obligations on notice, consent, security, breach reporting and individual rights.
General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.
Jupinder Bedi — Jupinder writes on data protection practice at ProtectComply, with a focus on how obligations translate into system behaviour.
Take the free readiness check and find out in 10 minutes.
Start free readiness check →