On August 11, 2023, India's long-awaited general personal
data protection legislation, the Digital Personal Data Protection
Act, 2023 ("DPDPA") was finally
enacted.
Governing the world's fifth largest economy and one of its
fastest growing digital markets, the DPDPA will be of importance to
a large number of international businesses that operate in India,
rely on Indian service providers/group service companies for their
operations, or are looking to enter Indian markets.
The evolution of the DPDPA through the years, and some of its
salient features, are discussed here.
While the DPDPA takes inspiration from the GDPR, unlike previous
drafts, it is a distinct legal regime which differs from GDPR in
significant ways. It has many similarities with Singapore's
Personal Data Protection Act 2012, as further discussed in our
recent blog post on the similarities between the Singaporean and
Indian regimes (available here).
