Digital Personal Data Protection Act (DPDPA) 2023

Key Highlights

Rights: It grants individuals the right to access their data, seek corrections or erasures, and nominate someone to manage their data in case of death or incapacity.

Consent & Transparency: Organizations (Data Fiduciaries) must provide clear, itemized notices and obtain verifiable consent before processing personal data.

Timeline for Compliance: Following the rollout of the DPDP Rules, organizations have an 18-month phased compliance timeline, leading up to a mandatory compliance deadline of May 13, 2027.

Penalties: Non-compliance or data breaches can result in heavy financial penalties, with fines going up to ₹250 crore.