← All frameworks
🇮🇳INDPDP Act 2023

India Digital Personal Data Protection Act.

India's DPDP Act establishes consent-based personal data protection with notice and purpose limitation. It creates a Data Protection Board for adjudication and applies to processing of digital personal data within India or for offering goods/services to individuals in India.

Maximum penalty

₹250 crore (~$30M)

Source: DPDP Act 2023

Key requirements

Notice and consent for data processing

Purpose limitation

Data fiduciary obligations

Significant Data Fiduciary additional duties

+2 more requirements in the complete guide.

Get the full DPDP compliance guide →

Enforcement examples

Rules being notified

DPDP Act passed August 2023; rules expected for notification in 2025

-

2025

How Tessera automates DPDP compliance

DPDP consent management

Data fiduciary compliance tracking

Breach notification workflow

Data principal rights automation

DPDP compliance checklist

Essential steps to achieve and maintain DPDP compliance.

1

Implement notice and consent mechanisms

2

Identify if Significant Data Fiduciary

3

Establish data breach notification process

+2 more steps in the full checklist.

Get your complete DPDP compliance checklist - free →

Industries affected

Technology & SaaSFinancial Services

Calculate your DPDP exposure.

See exactly how DPDP penalties apply to your revenue and industry profile.