DPDP Act

    ESG & Governance

    India's Digital Personal Data Protection Act, 2023, which sets the rules for processing digital personal data.

    The Rules under the Act were notified on 14 November 2025, with most duties applying after 18 months. Data fiduciaries must give clear notices, get valid consent, protect data and report breaches. Penalties reach ₹250 crore for failing to take reasonable security safeguards.

    Related terms