By Girija Togarati, ISO 27001 Lead Auditor. Reviewed by Murty Nisthala, CISA, CISSP, CCSP.

The Digital Personal Data Protection Act, 2023 is India’s data protection law. Here is what it requires.

What it governs

The DPDP Act governs the processing of digital personal data in India. It applies to businesses that handle customer or employee personal data.

Key roles

The Data Principal is the individual, the Data Fiduciary decides how data is processed, and the Consent Manager helps manage consent. The Data Protection Board of India enforces the law.

What to do

Obtain valid consent, limit processing to stated purposes, and report breaches. Univate runs your DPDP readiness end to end.

Univate Solutions delivers DPDP Act Compliance in India end to end. Book a free consultation and get a fixed quote. Explore data privacy and compliance.