DPDP Act
Act No. 22 of 2023
The Digital Personal Data Protection Act, 2023
The bare text of the Digital Personal Data Protection Act, 2023.
44
Sections
9
Chapters
Rs. 250 crore
Penalty cap
Digital office
Board
44
sections
Default readable text
Opening text
Preamble
An Act to provide for the processingDefined in section 2(x): processing in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure... of digital personal dataDefined in section 2(n): digital personal data means personal data in digital form in a manner that recognises both the right of individuals to protect their personal dataDefined in section 2(t): personal data means any data about an individual who is identifiable by or in relation to such data and the need to process such personal dataDefined in section 2(t): personal data means any data about an individual who is identifiable by or in relation to such data for lawful purposes and for matters connected therewith or incidental thereto.
BE it enacted by Parliament in the Seventy-fourth Year of the Republic of India as follows:-
Chapter I
3 sections
Preliminary
S. 2 Definitions
S. 3 Application of Act
Chapter II
7 sections
Obligations of Data Fiduciary
S. 4 Grounds for processing personal data
S. 5 Notice
S. 6 Consent
S. 7 Certain legitimate uses
S. 8 General obligations of Data Fiduciary
S. 9 Processing of personal data of children
S. 10 Additional obligations of Significant Data Fiduciary
Chapter III
5 sections
Rights and Duties of Data Principal
S. 11 Right to access information about personal data
S. 12 Right to correction and erasure of personal data
S. 13 Right of grievance redressal
S. 14 Right to nominate
S. 15 Duties of Data Principal
Chapter IV
2 sections
Special Provisions
S. 16 Processing of personal data outside India
S. 17 Exemptions
Chapter V
9 sections
Data Protection Board of India
S. 18 Establishment of Board
S. 19 Composition and qualifications for appointment of Chairperson and Members
S. 20 Salary, allowances payable to and term of office
S. 21 Disqualifications for appointment and continuation as Chairperson and Members of Board
S. 22 Resignation by Members and filling of vacancy
S. 23 Proceedings of Board
S. 24 Officers and employees of Board
S. 25 Members and officers to be public servants
S. 26 Powers of Chairperson
Chapter VI
2 sections
Powers, Functions and Procedure of Board
S. 27 Powers and functions of Board
S. 28 Procedure to be followed by Board
Chapter VII
4 sections
Appeal and Alternate Dispute Resolution
S. 29 Appeal to Appellate Tribunal
S. 30 Orders passed by Appellate Tribunal to be executable as decree
S. 31 Alternate dispute resolution
S. 32 Voluntary undertaking
Chapter VIII
2 sections
Penalties and Adjudication
S. 33 Penalties
S. 34 Crediting sums realised by way of penalties
Chapter IX
10 sections
Miscellaneous
S. 35 Protection of action taken in good faith
S. 36 Power to call for information
S. 37 Power of Central Government to issue directions
S. 38 Consistency with other laws
S. 39 Bar of jurisdiction
S. 40 Power to make rules
Rules under this section
DPDP Rules
S. 41 Laying of rules and certain notification
S. 42 Power to amend Schedule
S. 43 Power to remove difficulties
S. 44 Amendments to certain Acts
No matching sections
Try a shorter term like committee, appeal, complaint, employer, or compensation.
Rules made under this Act
The Rules are made Chapter by Chapter, not as one body: each set below sits under the Chapter its notification is issued under. A set that serves the Act generally is listed last.