HomeSearchBrowseSectorsAlertsBudgetParliamentHow Policy Is MadeLong ReadsPolicy HistoryIntelligenceKnowledge GraphContinuityCompareAmendmentsWeekly WrapDigestStatesMy TrackerSourcesBlogAPIAboutRSS Feed
Latest policy
Adjudication Order in the matter of suspected insider trading in the scrip of Wipro LtdAdjudication Order in the matter of inspection of IIFL Capital Services LimitedDraft Telecommunication (Broadcasting & Cable) Services DRM Based Digital Addressable Systems Audit Manual’ for seeking comments of StakeholdersSection 42(1) of the Reserve Bank of India Act, 1934 - Change in Daily Minimum Cash Reserve Maintenance RequirementRBI Announces Regulatory Measures for the Foreign Exchange MarketRBI launches Quarterly Order Books, Inventories and Capacity Utilisation Survey: July – September 2026 (Round 75)Risk Management and Inter-Bank Dealings - Foreign Exchange Risk ReserveOctober 6, 2026Delegation of Financial Power Rules, 1995Notification for Request for Empanelment (RFE) for Empanelment of Consulting Agencies For Digital Personal Data Protection Act (DPDPA) Gap Assessment, Compliance Framework Development and Implementation SupportDirection regarding publication of tariff offers, etc.Ministry of Textiles extends RoSCTL Scheme till 31 December 2026Adjudication Order in the matter of suspected insider trading in the scrip of Wipro LtdAdjudication Order in the matter of inspection of IIFL Capital Services LimitedDraft Telecommunication (Broadcasting & Cable) Services DRM Based Digital Addressable Systems Audit Manual’ for seeking comments of StakeholdersSection 42(1) of the Reserve Bank of India Act, 1934 - Change in Daily Minimum Cash Reserve Maintenance RequirementRBI Announces Regulatory Measures for the Foreign Exchange MarketRBI launches Quarterly Order Books, Inventories and Capacity Utilisation Survey: July – September 2026 (Round 75)Risk Management and Inter-Bank Dealings - Foreign Exchange Risk ReserveOctober 6, 2026Delegation of Financial Power Rules, 1995Notification for Request for Empanelment (RFE) for Empanelment of Consulting Agencies For Digital Personal Data Protection Act (DPDPA) Gap Assessment, Compliance Framework Development and Implementation SupportDirection regarding publication of tariff offers, etc.Ministry of Textiles extends RoSCTL Scheme till 31 December 2026
ActArchiveFriday, 11 August 2023

Digital Personal Data Protection Act, 2023

Cite this

Citations are auto-generated; verify before publishing. The act classification is PolicyDhara's, not the source's.

Central or state Act — primary legislation passed by the legislature. Carries binding force and shapes the rules under which citizens, institutions, and markets operate.

Summary

India's first comprehensive data protection legislation governing the processing of digital personal data. Establishes Data Protection Board, defines data principal and fiduciary rights and obligations, and provides for significant penalties.

Key Facts

TypeAct
SourceHistorical Record
PublishedFriday, 11 August 2023
Affected Population~850 million internet users, 75,000+ startups

Key Numbers

Rs 15,000 crore for Digital India initiatives
UPI: 14 billion monthly transactions
850 million+ Aadhaar-linked mobiles
20 million central + state government employees

Key Authorities

Ministry of Electronics & ITTRAICERT-InPMOCabinet Secretariat

Key Stakeholders

Internet UsersTech CompaniesStartupsCivil ServantsState GovernmentsJudiciary

Government Context

NDA IIBJP-led NDA
Right
LeftCentreRight

Impact Assessment

7/10
Impact Score
BeneficiariesAll internet users in India (~85 crore)
CoverageAll states and UTs
Implementation StatusEarly Stage
30% implemented

Key Outcomes

  • DPDP Act 2023 enacted — India's first comprehensive data law
  • Data Protection Board constituted
  • Rules for consent management and cross-border data flow notified

Challenges

  • Government exemptions criticized
  • Compliance readiness of SMEs
  • Board independence concerns

SDG Alignment

16Peace & Justice

Amendment History

6 changes recorded for this policy.

DescriptionThursday, 9 April 2026via barandbench
India's first comprehensive data protection legislation governing the processing of digital personal data. Establishes Data Protection Board, defines data principal and fiduciary rights and obligations, and provides for significant penalties.
Worldwide, data protection laws are based on a straightforward principle: collect and process as little data as possible to safeguard the privacy interests of residents. Many responsible technology companies also base their privacy practices on the concept of data minimisation. Even in the initial drafts of India’s data protection bills, including the explanatory note to the 2022 Bill, data minimisation was specifically identified as a key principle. The final version of the Digital Personal Dat
DescriptionMonday, 13 April 2026via hindustan_times
India's first comprehensive data protection legislation governing the processing of digital personal data. Establishes Data Protection Board, defines data principal and fiduciary rights and obligations, and provides for significant penalties.
SC issues notice to Centre on PIL challenging provisions of digital personal data protection law
TypeSunday, 19 July 2026via historical
policy
act
SectorsTuesday, 11 August 2026via historical
Digital & Technology
Digital & Technology, Governance & Reform
DescriptionThursday, 27 August 2026via livelaw
India's first comprehensive data protection legislation governing the processing of digital personal data. Establishes Data Protection Board, defines data principal and fiduciary rights and obligations, and provides for significant penalties.
On June 1, 2026, the Central Consumer Protection Authority (CCPA) penalised PhysicsWallah Limited with ₹5 lakh for deployment of dark patterns on its platform. The order narrates that PhysicsWallah maintained a pre-ticked “Donate for PW Foundation” checkbox which added ₹10 to the final checkout bill unless the user affirmatively unchecks it. The order also found that the “free courses” that PhysicsWallah offered were inaccessible unless every user affirmatively surrenders their phone number and
DescriptionSaturday, 3 October 2026via manipur_govt
India's first comprehensive data protection legislation governing the processing of digital personal data. Establishes Data Protection Board, defines data principal and fiduciary rights and obligations, and provides for significant penalties.
Please click here to download Notification

Keyboard Shortcuts

Navigate between policiesJ / K
Open focused policyEnter
Focus search/
Toggle light/darkD
Bookmark focused policyB
Go homeH
Show this help?
Close overlayEsc