The Digital Personal Data Protection Act, 2023
Key provisions | Enforcement | Implementation
On 11 August 2023, the President of India formally enacted the “Digital Personal Data Protection Bill” following its approval from both houses of the Indian Parliament. This enactment establishes a dedicated legal framework in India, marking a significant milestone—India’s first-ever privacy Act aimed at safeguarding the personal data of citizens. It spotlights the importance of the Data Protection Board of India, its key provisions, and the rights and duties of organisations and individuals.
India's Draft DPDP Rules: Leading Digital Privacy Compliance
Ministry of Electronics and Information Technology has released the Digital Personal Data Protection Rules, 2025 on 3 January 2025 to facilitate the implementation of the Digital Personal Data Protection Act, 2023 (DPDP Act).
Download our summary POV to gain a deeper understanding of how the DPDP Rules will impact your business.
In this fast-paced digital landscape, the Digital Personal Data Protection Act, 2023, is a momentous stride in safeguarding individual privacy rights and promoting responsible data management practices. This groundbreaking legislation acknowledges the ever-growing significance of personal data protection and aims to strike a delicate balance between individual rights and an organisation's legitimate data-processing needs.
The primary purpose of the Act is to regulate the processing of digital personal data and respect individuals' right to protect their data while recognising the necessity of processing and using such data for lawful purposes. The language employed in the Act is simple and straightforward, ensuring easy comprehension for all. Moreover, the Act aims to establish a comprehensive legal framework to govern digital personal data protection in India.
The DPDP Act influences the entire data management process. Hence, the board must oversee the privacy programme's implementation, governance, and improvement to achieve success. This publication, “The DPDP Act and enterprises in India: Privacy for the board,” provides a comprehensive view of the board’s role in navigating the DPDP Act. It deals with the provisions of the new law and its impact on enterprises whilst providing board members with expert insights on how to approach the operationalisation of the DPDP Act. It also contains a ready reckoner for board members to understand the key questions they must tackle to ensure compliance with the new law.
Understanding your organisation’s privacy journey
As part of our ongoing efforts to support organisations achieve their strategic and compliance objectives related to data governance, data protection and regulatory compliance across people, processes and the technology landscape, we have designed a simple questionnaire. We aim to gather information and provide you with a tailor-made support/roadmap for privacy compliance as against the regulatory requirements and industry best practices. Please take a moment to complete the questionnaire. This will help us understand your obligations and determine the next steps.
Ensuring compliance with the Act is an ongoing process demanding a proactive approach in implementing various measures to ensure the lawful processing of digital personal data and protect individuals' privacy. It is crucial for organisations to stay abreast of any changes to the law and adapt their practices accordingly.
Download our PoV, which aims to explore the essential provisions of the Act and provide valuable recommendations to help your organisation in its compliance readiness journey.
Transform intricate challenges into opportunities with our expertise
Explore how we can support you in getting ready for the privacy Act provisions. Reach out to our team of experienced privacy specialists to start a conversation today for more up-to-date information.
Our focus areas
We help organisations accelerate performance and unlock value through leadership development and capability building at scale in the following areas.
