The DPDP Act, India’s first dedicated digital data protection law, establishes rules for how digital personal data is collected, used, and governed, defining clear responsibilities for organizations and rights for individuals. It applies to data collected in India or about Indians and excludes purely personal or public data. The law emphasizes informed consent, purpose limitation, security safeguards, and accountability, impacts B2B and B2C entities, and empowers the Data Protection Board of India to enforce compliance with penalties up to ₹250 crore.
