.svg)
.avif)
.png)
%20(1).avif)
The Digital Personal Data Protection (DPDP) Act is a game-changer in India's approach to data privacy. In this piece we cover everything about the applicability of the DPDP Act. To whom, what, where and when will the law apply?
To what does the DPDP Act apply?
The law applies to Digital Personal Data — any data about an individual who can be identified using that data, if collected digitally or digitised after physical collection.
To whom does the DPDP Act apply?
To individuals and organisations that process data of Indian citizens. The DPDP Act defines two main stakeholders: Data Principals (individuals whose data is processed) and Data Fiduciaries (entities who decide the means and purpose of processing).
Where does the DPDP Act apply?
The DPDP Act applies to personal data processed within India AND data processed outside India if it pertains to business activity related to individuals within India.
When will the DPDP Act not apply?
Exemptions include personal/domestic use, publicly available data, exceptions to consent (employment-related processing, compliance with legal obligations, medical emergencies), and state exemptions for national security purposes.
