DPDP Act (India)
India's Digital Personal Data Protection Act 2023, with Rules in force from November 2025.
The DPDP Act 2023 is India's first horizontal personal-data law. The DPDP Rules were notified in November 2025 and are being enforced in a phased 12–18 month window. Penalties reach INR 250 crore per instance for failure to protect personal data. Significant Data Fiduciaries, designated by the government, face additional obligations including a DPO and independent audit.
Related terms
- Data Protection Officer (DPO) — An appointed privacy specialist responsible for monitoring GDPR / PDPA / DPDP compliance.