India · DPDP Act 2023 · DPDP Rules 2025

Clarity on India’s data protection law — before it is enforced.

Plain-English guidance, section by section, with pointers to the official text. Built for founders, product teams and compliance leads who need to act on the DPDP Act, not just read about it.

Scan your website Read the guides

₹250 cr

Maximum penalty for failing to take reasonable security safeguards — s.8(5)

72 hrs

To report a personal data breach to the Board — Rule 7(2)(b)

90 days

Outer limit to resolve a grievance — Rule 14(3)

Under 18

A child, needing verifiable parental consent — s.2(f), s.9(1)

Three ways to move from awareness to compliance

Start with the law, check your own exposure, then bring in people when it matters.

Insights

71 plain-English guides across the Act’s chapters, sectors and roles — with pointers to the official text when wording matters.

Browse the guides

Compliance scan

An automated check of your live website for cookies and trackers, a consent banner, form consent checkboxes and privacy-policy alignment — deterministic checks, not legal advice.

Run a free scan

Advisory

Discovery, implementation support and workshops when your team needs hands-on help turning the guidance into working processes.

Talk to us

Featured insights

View all 71 guides

Enforcement DPDP penalties explained Ceilings from ₹10,000 to ₹250 crore under the Schedule — and why there is no GDPR-style turnover percentage. Status Law status and timeline: what is in force today The staggered commencement under G.S.R. 843(E), dated 13 November 2025, tranche by tranche through May 2027. Governance Significant Data Fiduciaries: designation and duties No numeric threshold — the qualitative test, and the independent auditor and recurring impact assessment it triggers.

Guidance for your sector

The Act applies regardless of company size. What changes by sector is where personal data sits and which duties bite first.

Video library

The whole Act, one section at a time

208 short explainers in English and Hindi, in the order the law is written — each mapped to its section of the Act.

Open the library

SECTION 6(2)The consent that was never valid SECTION 15The fine that applies to you SECTION 2(f)Eighteen, not thirteen

How we work

Built from the statute

Written from the text of the Act and the 2025 Rules, with official sources one click away.

Citations you can check

Figures and duties carry their section or rule, so you can verify the wording at source.

Independent

No vendor conflicts shaping the guidance; affiliate links are disclosed under the editorial policy.

Kept current

Guidance is revised as rules and notifications change — see the law status & timeline.

Also on dpdpact.info Start here Compliance portal Compliance checklist Templates & worksheets Resource hub Training hub Employee awareness training Starter Pack by email About & editorial stance

Official sources

Curated official entry points for the Act and Rules. Not legal advice.

Official & primary sources

Curated entry points (see official resources). Dates reflect last editorial refresh here, not live government APIs.

Law status & timeline DPDP Rules & updates Chapter map Start here

Know where you stand.

Run a free automated scan of your public website and take the findings to your team — with the scan’s limitations stated plainly.

Start a scan Speak to an advisor

Important: This website is informational and should not be treated as legal advice. Cross‑check obligations against the official Act and notified rules, the law status & timeline, and qualified counsel for your facts.