Discover DPDPA Digital Personal Data Protection Act
The law is meant to provide for the processing of digital personal data in a manner that safeguards the right of individuals and ensures that the processing is done for lawful purposes. The enormous rise in use of digital platforms and services over the past few years and lack of adequate legal and regulatory measures had necessitated the enactment of a data protection bill.
Understanding DPDPA Digital Personal Data Protection Act
The Digital Personal Data Protection Act (DPDPA) 2023 got enacted after more than a decade of effort to adopt a comprehensive data protection regime for India. It became a law on August 11, 2023, following assent by the President of India and publication in official gazette after clearing the Parliamentary hurdle the same week. The law is meant to provide for the processing of digital personal data in a manner that safeguards the right of individuals and ensures that the processing is done for lawful purposes. The enormous rise in use of digital platforms and services over the past few years and lack of adequate legal and regulatory measures had necessitated the enactment of a data protection bill. Prior to the DPDPA, India did not have a standalone law on data protection, and processing of personal data was largely regulated under the Information Technology (IT) Act, 2000.
Exterro's Solutions
The bill is yet to be made enforceable. MeitY will issue a notification detailing the timelines for enforcement of various provisions. Thus far, it has indicated that the sunshine period will not be as elaborate as GDPR, which allowed 24 months, and some provisions could provide as short as six months for businesses to become compliant. The DPDPA applies to personal data that is collected in digital form or in non-digital form but digitized subsequently.
Resources for Law Firms
Utilize our free resources below to see how Exterro can help you become compliant in many of the global regulations.
Blog
An Overview of India's Digital Personal Data Protection Act (DPDPA) of 2023
Read this blog post for a high level overview of the Digital Personal Data Protection Act (DPDPA) of 2023, the new privacy law in India.
Blog
China's New Data Privacy Law: PIPL (Personal Information Protection Law)
Blog
3 Reasons Why Companies Need to Address Data Retention/Deletion Now
"This is the tool that you need to use…When I took over the function of legal hold person, it was daunting to think of all the processes and things I would have to learn. It was hard for me to wrap my head around at the time. Having Exterro made it so much easier."
