Legal intelligence page · Statute

Digital Personal Data Protection Act, 2023

India's general data protection statute. This page tracks the Act, the Rules made under it, and every regulatory development the platform indexes, updated automatically as new content is published.

Judgments indexed

64

Supreme Court

3

Last updated

Today

Overview

The DPDP Act establishes obligations for data fiduciaries processing digital personal data, a consent-based lawful basis with narrow exceptions, and a Data Protection Board with adjudicatory powers. The 2025 Rules supply the operative detail on notice, consent managers and breach reporting, and are being brought into force in phases.

Statutory text — extract

A Data Fiduciary may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose for which the Data Principal has given her consent, or for certain legitimate uses.

Read the full section on India Code →

Latest Supreme Court Judgments

  • 02 MAR 2026

    Informational privacy claims survive the commencement of the DPDP Act

High Court Developments

Delhi HC · MAY 2026

Breach notification duties apply pending the Board's constitution

Explainers & Analysis