Official Gazette Notification • 18 Months Deadline

Ensure Your DPDPA Compliance

The Digital Personal Data Protection Act transforms how India handles data. Simplify compliance, avoid penalties, and build trust with your users.

DPDPA at a Glance

Massive Penalties

₹250 Cr
Max Penalty

For failure to take reasonable security safeguards to prevent personal data breach.

Applicability

  • Digital personal data collected online.
  • Offline data that is digitized later.
  • Processing within India OR offering goods/services to India.

Individual Rights

Data Principals are empowered with rights to access, correct, erase, and redress grievances regarding their personal data.

Consent Managers

A new category of Data Fiduciaries that will enable users to manage, review, and withdraw consent through a unified platform.

Cross-Border Transfer

Blacklist Approach

Allowed by default unless restricted by Govt.

Roles & Responsibilities

Security Safeguards

Implement technical and organizational measures to prevent data breaches.

Breach Notification

Notify the Board and affected users of any personal data breach irrespective of size.

Notice & Consent

Provide clear notice and obtain verifiable consent before processing data.

Implementation Roadmap

Nov 2022

Draft Bill Released

Ministry of Electronics and IT releases draft for public consultation.

Aug 11, 2023

Act Gazetted

President grants assent, officially becoming the Digital Personal Data Protection Act, 2023.

13 Nov 2025

Rules Released by Gov with Deadline of 18 months

Start Your Compliance Journey

Don't wait for the fines. Assess your organization's readiness today with our automated compliance tools.