This guide is available in English and 14 Indian languages, including Hindi, Bengali, Telugu, Tamil, Marathi, Gujarati, Kannada, Malayalam, Odia, Punjabi, Assamese, Urdu, Konkani and Nepali. Choose yours from the Language menu above.
Every day, we share personal data.
When we create an account, visit a hospital, apply for a job, shop online, or use a mobile app, we share information such as:
Organizations use this information to provide services.
But who is responsible for it?
Who decides why it is collected?
Who handles it?
Who manages permission to use it?
Who steps in when rules are broken?
The Digital Personal Data Protection Act, 2023 (DPDP) is India's law that answers these questions.
It explains:
Imagine an event being organized.
There are guests.
There is an organizer making decisions.
There may be service providers helping behind the scenes.
There may be a system for managing permissions.
And there may be an authority that steps in if rules are broken.
DPDP defines the role each participant plays when personal data is involved.
Understanding these roles is the first step to understanding DPDP.
Answer a few quick questions and we'll help identify your role.
Then we'll explain what that role means and what responsibilities may come with it.
Take the readiness assessment and generate your compliance documents from your answers.