Digital Personal Data Protection Act

India's Digital Personal Data Protection Act, 2023 (DPDPA), marks a pivotal shift in data privacy, introducing a consent-centric framework and extraterritorial reach. Enacted in August 2023, with draft rules issued in January 2025, it aligns India with global standards like GDPR. Key features include stringent rules for children's data, cross-border transfer "blacklisting," and mandatory data breach notifications.

Data retention under DPDPA: Know when businesses must delete personal data and the legal obligations for compliance.