Digital Personal Data Protection Act, 2023

This authoritative edition brings together the full text of the Digital Personal Data Protection Act, 2023 with concise explanatory notes and references to official rules and guidance. The Act defines core concepts (data principal, data fiduciary, data processor), prescribes lawful grounds for processing (including consent), requires clear notice and transparent handling of personal data, and mandates reasonable security safeguards and breach reporting. It creates institutional enforcement via the Data Protection Board of India with powers to adjudicate complaints and levy penalties — including high-value fines for serious breaches and non-compliance. The Act imposes special obligations for processing children’s data (verifiable parental consent) and sets out obligations for significant data fiduciaries. This edition adds practical annexures: compliance checklists, sample privacy-notice templates, breach-notification timelines, and a summary of penalties and remedial routes — making it a go-to resource for in-house counsel, DPOs, compliance teams, product managers and law practitioners preparing for operational compliance under India’s new privacy regime.