All articles

The Digital Personal Data Protection Act, 2023

By
  • Mitali Kanchan
Thumbnail for blog post

The Digital Personal Data Protection Act, 2023 (DPDPA) is a crucial legislative framework designed to oversee the processing and safeguarding of personal data. It received the assent of the President of India on 11 August 2023.


The object of the DPDPA is processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto. 

Territorial & Material Scope

Its territorial scope extends to: 

  1. processing of data within the territory of India; and 
  2. processing outside India in connection with any activity related to offering goods and services within India. 

Its material scope extends to: 

  1. personal data that is collected in digitised form; and 
  2. personal data that is collected in non-digital form and digitised subsequently.