Framework

DPDP

India’s Digital Personal Data Protection Act, 2023

What it is: India’s data protection law, phased in under the DPDP Rules notified on 13 November 2025.
Applies to: Processing of digital personal data in India, and outside India when offering goods or services to people in India
Current version: DPDP Act, 2023 and DPDP Rules, 2025 — consent managers from 13 November 2026, most obligations from 13 May 2027
Set by: Ministry of Electronics and Information Technology; enforced by the Data Protection Board of India