Digital Personal Data Protection Act, 2023

Digital Personal Data Protection Act, 2023
Parliament of India
  • An Act to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto.
CitationAct No. 22 of 2023
Territorial extentIndia
Passed byLok Sabha
Passed7 August 2023
Passed byRajya Sabha
Passed9 August 2023
Assented to byPresident of India
Assented to11 August 2023
Commenced13 November 2025 (Sub-section (2) of section 1, section 2, sections 18 to 26 sections 35, 38, 39, 40, 41, 42, 43, and subsections (1) and (3) of section 44 of the Act)

13 November 2026 (sub-section (9) of section 6 and clause (d) of sub-section (1) of section 27 of the Act)

13 May 2027 (Remaining provisions)
Legislative history
First chamber: Lok Sabha
Bill citationBill No. 113 of 2023
Introduced byAshwini Vaishnaw Minister of Electronics and Information Technology, Minister of Communications, Minister of Railways
First reading3 August 2023
Keywords
Consent, Data privacy, Data breach
Status: In force
Preview warning: Using more than one of the following parameters in Template:Infobox legislation: legislature, enacted_by.

The Digital Personal Data Protection Act, 2023 (also known as DPDP Act or DPDPA-2023) is an act of the Parliament of India to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes. This is the first Act of the Parliament of India where "she/her" pronouns were used unlike the usual "he/him" pronouns.