DPDP Act 2023 Explained: A Plain-Language Overview
What India’s Digital Personal Data Protection Act, 2023 covers, who it applies to, the key roles it creates and how its rules are being brought into force.
DPDP Blog
Data Principal, Data Fiduciary and Data Processor: Key DPDP Definitions
The terms that decide who has which duties under the DPDP Act — explained with everyday business examples.
Consent Under the DPDP Act: Requirements, Notices and Withdrawal
What makes consent valid under the DPDP Act, what a privacy notice must contain, and how consent must be as easy to withdraw as to give.
Legitimate Uses Under the DPDP Act: When Consent Is Not Required
Section 7 of the DPDP Act lists the situations in which personal data may be processed without consent. Here is what they are — and their limits.
Rights and Duties of Data Principals Under the DPDP Act
The rights individuals have over their personal data — access, correction, erasure, grievance redressal and nomination — and the duties they must observe.
Data Fiduciary Obligations Under the DPDP Act: A Practical Guide
The everyday duties of organisations that process personal data — accuracy, security safeguards, processors, erasure, grievances and cross-border transfers.
Personal Data Breach Management Under the DPDP Act and Rules
How to prepare for, respond to and report a personal data breach — including the 72-hour report to the Data Protection Board under the DPDP Rules, 2025.
Children’s Personal Data Under the DPDP Act: Verifiable Parental Consent
The DPDP Act sets stricter rules for the personal data of anyone under 18 — verifiable parental consent and a ban on tracking and targeted advertising.
Significant Data Fiduciaries: Additional Obligations Under the DPDP Act
Who may be notified as a Significant Data Fiduciary and what extra duties follow — a Data Protection Officer in India, an independent auditor and annual impact assessments.