Which law now governs personal data protection in India?
Answer:
Personal data protection in India is governed by the Digital Personal Data Protection Act, 2023, read with the Digital Personal Data Protection Rules, 2025 (notified 14 November 2025). Together they regulate how organisations collect, use, store and share the personal data of individuals (Data Principals) located in India, and establish the Data Protection Board of India to enforce the law.
dpdp act 2023 rules 2025 governing law india personal data
Related Questions:
- By when do organizations need to technically integrate with Board-registered Consent Managers?
- Is the consent notice required to give contact details?
- What makes consent valid under Section 6 of the DPDP Act?
- Must a Data Fiduciary maintain data accuracy?
- What is the right to correction and erasure?
- How are DPDP penalties determined by the Board?