What is the DPDP Act 2023?

The Digital Personal Data Protection (DPDP) Act is India's comprehensive data privacy law, defining how businesses must handle the personal data of Indian citizens.

It introduces strict requirements around consent, data minimization, and the rights of the Data Principal. Non-compliance can lead to severe penalties, including fines up to ₹250 crore.

Under the DPDP Act, organizations must ensure they are providing clear itemised notices to users before collecting data, and ensuring that users can withdraw consent just as easily as they gave it.