Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Implementation
Training
Resources
About
Readiness assessment

Get implementation help

Find your DPDP Act implementation partner

Get matched with a vetted DPDP Act specialist, a Data Protection Officer, consultant or auditor, who can turn your obligations under the Digital Personal Data Protection Act into a working compliance programme.

Understand. Check. Connect.

We match you with the right DPDP implementation partner, only when you ask.

What an implementation partner does

  • Maps which DPDP Act obligations actually apply to your organisation, so nothing surfaces late.
  • Builds compliant consent and notice flows under Sections 5 and 6.
  • Stands up reasonable security safeguards and a breach-response process under Section 8.
  • Sets retention and erasure rules and gets your vendor contracts in order.
  • For a Significant Data Fiduciary: appoints a DPO and runs DPIAs and independent audits under Section 10.

Who this helps

Whether you are starting from zero or closing specific gaps, a partner meets you where you are.

FoundersLegal / DPOCompliance leadsSignificant Data Fiduciaries

How matching works

  1. Tell us where you stand. Take the free readiness assessment to map your obligations and gaps in a few minutes.
  2. We match you to a specialist. Based on your scope, sector and risk, you are connected with a suitable DPDP Act implementation partner.
  3. They implement it with you. The partner turns the gap list into notices, consent flows, security controls and, where needed, a DPO and audit programme.

Ready to get matched?

Start with the free readiness assessment to see exactly where you stand, then get connected with a specialist who can implement it.

Start readiness assessmentGet matched with a partner

This is an educational resource, not legal advice. dpdpactindia.in is independent and not affiliated with the Government of India. Matching is provided in partnership with DPOIndia.