The Digital Personal Data Protection Act (DPDPA) is a landmark piece of legislation that has reshaped the regulatory environment for data privacy in India. With its stringent requirements, the DPDPA presents new challenges for corporations, particularly in terms of compliance, data breaches, and cross-border data transfers. This article explores the DPDPA, its rationale, and its impact on corporate disputes.
What is DPDPA?
The Digital Personal Data Protection Act (DPDPA) is a comprehensive legal framework aimed at regulating the collection, storage, processing, and transfer of personal data in India. It requires organizations to obtain explicit consent from individuals before collecting their data, enforce strict security measures, and respect individuals' rights to access, correct, and delete their data. The act also imposes heavy penalties for non-compliance.
