What is the DPDP Act 2023?

The Digital Personal Data Protection Act 2023 is India's first comprehensive data protection law, governing how organizations collect, process, and store personal data of Indian residents. Penalties for non-compliance reach ₹250 crore per breach, with the Data Protection Board empowered to investigate and enforce.

Who must comply with the DPDP Act?

Every business processing personal data of Indian residents must comply, regardless of where the business is headquartered. This includes Indian SMBs, SaaS startups, e-commerce sites, payment processors, and foreign companies serving Indian users. Government bodies have limited exemptions; private organizations have none.

When is DPDP Act enforcement starting?

The DPDP Act was notified in August 2023. Phased enforcement began in 2024, with the Data Protection Board fully operational by 2025. By 2026, Indian SMBs are expected to demonstrate consent management, breach notification, and data subject rights workflows during routine compliance audits.

What's the difference between DPDP and GDPR?

DPDP focuses narrowly on personal data of Indian residents with simpler consent rules than GDPR's lawful-basis framework. Penalties are flat-fee (up to ₹250 crore) rather than GDPR's revenue-percentage model. DPDP allows cross-border transfers by default unless blacklisted, the reverse of GDPR's approach.

All Articles

compliance

Compliance

Everything Indian businesses need to know about the DPDP Act 2023, SEBI cybersecurity requirements, and regulatory compliance.

2 articles

compliance10 min read

DPDP Act Maximum Penalty: ₹250 Crore — 5 Real Scenarios for Indian Startups

The DPDP Act maximum penalty is ₹250 crore per violation. Here are 5 real-world scenarios for Indian startups — actual penalty calculations, compliance costs, and a 14-day roadmap to reduce your risk before the Board acts.

18 Mar 2026

compliance10 min read

Understanding the DPDP Act 2023: A Complete Guide for Small Businesses

What the Digital Personal Data Protection Act requires from your business, the penalties for non-compliance, and practical steps to get compliant.

10 Mar 2026

Loading…