Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Implementation
Training
Resources
About
Readiness assessment

DPDP Blog

DPDP guides and updates

Plain-English, Section-anchored guides to the Digital Personal Data Protection Act, 2023 and the Rules, 2025: what to do, in what order, before the 13 May 2027 deadline.

GuidesKey Obligations for Hospitals Under the DPDP Act7 Oct 2026 · 13 min readHospitals are Data Fiduciaries under the DPDP Act. See the 11 key obligations with section numbers, deadlines, penalties and a 7-step plan to 13 May 2027.Read Guides12 Best DPDP Consent Management Tools in India (2026)4 Oct 2026 · 5 min readCompare the 12 best DPDP consent management tools in India: features, free tiers and fit by business size, plus a withdrawal test to run before you buy.Read GuidesDPDP Consent Form: Sample and Requirements26 Aug 2026 · 5 min readThere is no official DPDP consent form. See what a valid consent request must contain, a copy-ready sample, and an editable template you can adapt.Read GuidesSignificant Data Fiduciary under the DPDP Act: who qualifies and what changes (Section 10)6 Aug 2026 · 5 min readHow the government designates a Significant Data Fiduciary, the extra Section 10 duties (India-based DPO, independent auditor, DPIAs) and how to prepare if you might qualify.Read GuidesThe DPDP Act data breach notification rule, explained (Section 8, Rule 7)6 Aug 2026 · 6 min readWhat counts as a personal data breach under the DPDP Act, who you must notify and how fast, the Rs 200 crore penalty band, and a first-hours response checklist.Read GuidesHow to write a DPDP-compliant privacy notice (Section 5 and Rule 3)6 Aug 2026 · 7 min readWhat a DPDP Act Section 5 consent notice must contain under Rule 3, the plain-language standard, and a copy-paste skeleton you can adapt for your Indian website.Read GuidesDPDP Act compliance checklist for Indian businesses (2026)6 Aug 2026 · 6 min readA plain-English, 10-point DPDP Act checklist for Indian websites and startups, ordered by the penalty exposure each item closes, with the deadline that matters.Read