FAQs On The Digital Personal Data Protection Act, 2023 And Rules, 2025

1. Introduction

Following years of legislative groundwork and an extensive consultation process, the Digital Personal Data Protection Act, 2023 ("DPDP Act") has finally been enforced (albeit in part). The Central Government has also released the necessary Digital Personal Data Protection Rules ("Rules") under the DPDP Act, providing the operational framework for compliance. This landmark framework, which obligates data fiduciaries to adhere to strict standards when processing the personal data of data principals, is largely considered business-friendly and is expected to meet global data adequacy requirements. Organisations, therefore, need to actively revisit and update their existing information technology policies and processes to ensure full compliance with the new legal requirements laid out in the DPDP Act and its accompanying Rules.