Digital Personal Data Protection Act, 2023 [A10-2C7]

As at 6 September 2026. In force from 13 November 2025 by Notification G.S.R. 843(E): phased commencement of the Digital Personal Data Protection Act, 2023 [N11-6ZG]. Partially commenced: some sections carry their own dates.

Dates: made 11 August 2023; in force 13 November 2025; ceased none recorded. Gazette: Gazette of India, Extraordinary, Part II, Section 1, 11 August 2023. Band A.

Cite: Digital Personal Data Protection Act, 2023, Act 22 of 2023 [A10-2C7]. Machine: A10-2C7.

Sections (19)

Section 1. Short title and commencement [S10-MY1]

Clause 2(f). child

Clause 2(g). Consent Manager

Clause 2(k). Data Processor

Clause 2(z). Significant Data Fiduciary

Section 2. Definitions [S10-MZ3]

Section 3. Application of Act [S10-N0W]

Section 4. Grounds for processing personal data [S10-N1Y]

Section 5. Notice [S10-N2R]

Section 6. Consent [S10-N3T]

Section 7. Certain legitimate uses [S10-N4M]

Section 8. General obligations of Data Fiduciary [S10-N5P]

Section 9. Processing of personal data of children [S10-N6G]

Section 11. Right to access information about personal data [S10-N7J]

Section 12. Right to correction and erasure of personal data [S10-N8C]

Section 13. Right of grievance redressal [S10-N9E]

Section 17. Exemptions [S10-NA8]

Section 18. Establishment of Board [S10-NBA]

Section 40. Power to make rules [S10-NC4]

Made under

No recital of a power is printed.

Acts on (1)

Cites Article 21, Constitution of India [S10-034], 13 November 2025.

Acted on by (1)

Commences: Notification G.S.R. 843(E): phased commencement of the Digital Personal Data Protection Act, 2023 [N11-6ZG], 13 November 2025.

Not held (0)

none